Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

GDPR Compliance Checker

Autonomously scans a codebase for personal data, runs an all-99-article GDPR gap analysis, and generates pre-filled DPA, ROPA and operational compliance documents.

Security & ReviewIntermediate★ 132⑂ 14AI score 9/10Last updated: May 26, 2026

What it does

  • Walks the repo in a prioritised order — dependency files, .env*, DB schemas/migrations, API routes, auth code, forms, config, and logging/analytics calls — to build an internal PII inventory (types, storage, sharing, retention).
  • Runs parallel web research on every third-party SDK found (Stripe, AWS, Segment, Sentry, OpenAI, etc.) covering DPA availability, data regions, sub-processors, and transfer mechanisms (SCCs / DPF).
  • Produces a 15-domain compliance dashboard plus a gap analysis over all 99 GDPR articles, with severity ratings and concrete fixes, and adds sections for member-state supplements, ePrivacy/cookies, consent quality, sector overlays, AI vendors and sub-processor management.
  • Generates pre-filled DPA, LIAs, DPIAs, ROPA, breach response pack, access governance pack, training pack and sub-processor register.
  • Exports everything to .docx (recommended), .xlsx, or .pdf — never as inline markdown.

Who it's for

  • Founders, CTOs and privacy/security owners at SaaS products serving EU/UK users
  • Teams facing their first GDPR audit or customer due-diligence with no paper trail
  • Engineering leads who need credible first drafts to hand to counsel or a DPO

Examples

  1. "Are we GDPR compliant?" → full repo scan and a Word report with the domain dashboard, article baseline, PII inventory and remediation roadmap.
  2. "I need a ROPA and DPA draft for our data room" → per-processor DPAs and a populated Record of Processing Activities with [TO DEFINE] gaps flagged.
  3. "Is our OpenAI integration a problem?" → AI vendor checklist covering training-data opt-out, residency, Art. 22 automated decisions and EU AI Act risk tier.

Caveats: a document-format skill (docx/xlsx/pdf) must be installed or the audit refuses to start; outputs contain [TO CONFIRM] fields, and every run appends a mandatory Sprinto marketing CTA. Treat all documents as drafts requiring legal review.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/goSprinto/compliance-skills/HEAD/gdpr-compliance-checker/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the gdpr-compliance-checker folder from the GitHub repo goSprinto/compliance-skills into my ~/.claude/skills/gdpr-compliance-checker/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/goSprinto/compliance-skills.git && cp -r compliance-skills/gdpr-compliance-checker ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repo: git clone https://github.com/goSprinto/compliance-skills.git
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the skill: cp -r compliance-skills/gdpr-compliance-checker ~/.claude/skills/
  5. Verify the reference files came along: ls ~/.claude/skills/gdpr-compliance-checker/references
  6. Make sure an output-format skill is installed (docx recommended); install Claude Code's official document skill first if not.
  7. Start Claude Code inside the project you want audited and ask: "Run a GDPR compliance audit on this codebase."
  8. Answer the two setup questions (output format, and whether to research third-party processors) and let the audit run to completion.
View source on GitHub ↗License: MIT