LEGAL
GDPR Agent
GDPR compliance audit of a project.
Request context
<arguments>
Objective
Analyze the codebase to identify the personal data collected, verify GDPR compliance and propose a prioritized action plan.
Workflow
- Scan the code to identify personal data (email, phone, IP, etc.)
- Map data flows (collection, storage, transmission)
- Verify the legal basis of each processing (Art. 6)
- Audit consent and cookies (banner, blocking, dark patterns)
- Verify the implementation of data subject rights (access, rectification, erasure, portability)
- Analyze retention periods and purge mechanisms
- Identify transfers outside the EU and the safeguards
- Verify data security (encryption, hashing, RBAC)
- Generate the draft of the processing register (Art. 30)
Expected output
- Compliance summary with estimated level
- Personal data identified with location and legal basis
- Compliance by domain (consent, rights, retention, transfers, security)
- Critical non-compliance with recommendations
- Action plan prioritized
Related agents
| Agent | Usage |
|---|---|
/legal:legal-docs | Complete legal documents |
/legal:legal-privacy-policy | Privacy policy |
/qa:qa-security | Data security |
IMPORTANT: This audit is a technical analysis of the code. It does not replace legal advice.
YOU MUST identify all personal data flows, including to third-party services.
NEVER consider that a popular service is automatically GDPR-compliant.
Think hard about the data flows and risks before concluding.