Free & open source

GDPR Compliance Skills

Seven GDPR skills and two commands · MIT licence · gdprgard.eu

This plugin adds GDPR working skills to Claude Code, Anthropic's coding assistant. Use them on your own documents, code and websites to draft a DPIA, build a record of processing, review a privacy policy, audit cookies and trackers, check a processor agreement, and handle breaches and data subject requests.

View on GitHub → Report an issue

Install

Run these two commands inside Claude Code:

/plugin marketplace add zsrrica-pixel/gdpr-compliance-plugin
/plugin install gdprgard-compliance@gdprgard-plugins

Restart Claude Code (or run /reload-plugins) and the skills are available. The plugin is also listed in Anthropic's plugin directory.

What is inside

dpiaScreens whether a DPIA is needed (Art. 35) and drafts one.
ropaBuilds or audits a record of processing activities (Art. 30).
privacy-policy-reviewChecks a privacy policy against Arts. 12-14.
cookie-tracker-auditAudits a site's cookies, trackers and consent banner.
dpa-reviewReviews a processor agreement against Art. 28 and drafts redlines.
breach-responseGuides breach handling and the 72-hour notification (Arts. 33-34).
dsar-responseHandles access, erasure and other data subject requests (Arts. 15-22).

Two commands wrap them: /gdprgard-compliance:gdpr-check <path> runs a prioritised compliance review of a file or folder, and /gdprgard-compliance:breach <incident> starts a breach response.

Working drafts, not legal advice. The skills produce drafts and checklists to help you prepare and review. They are a summary of GDPR requirements, not a substitute for your DPO or a qualified lawyer. Always check the output before relying on it.

Independent project. GDPRGard is not affiliated with, endorsed or sponsored by Anthropic. Claude and Claude Code are trademarks of Anthropic.

Your data stays with you

The plugin is a set of instructions that run inside your own Claude Code session. GDPRGard does not receive the documents, code or websites you analyse with it.

Contribute

Found a wrong or outdated legal statement, or want a new skill? Open an issue or a pull request. Guidelines are in the README.

More from GDPRGard

Prefer a browser? GDPRGard also has free GDPR tools for audits, privacy policies, breach notices and more.

Name / provider	Category	Purpose	Duration
gdprgard_cookie_consent_v2 GDPRGard.eu	Necessary	Remembers your accept/reject cookie choice	365 days
Session state GDPRGard.eu	Necessary	Keeps multi-step tool forms working as you move between steps	Browser session
Form submissions Formspree, Inc. (US)	Service Processors	Processes contact-form, review, and sign-up submissions	No browser cookie
Hosting & functions Netlify, Inc. (US)	Service Processors	Hosts the site and runs its serverless functions	No browser cookie
API requests Anthropic PBC (US)	AI Assistant	Powers GDPRChat and the GDPR Audit tool when you actively use them	No browser cookie
IDE, __gads, __gpi Google Ireland Ltd / Google LLC	Marketing	Ad personalization & measurement	Up to 13 months
test_cookie, NID Google Ireland Ltd / Google LLC	Marketing	Ad delivery & frequency capping	Up to 6 months