A generator for a Data Protection Impact Assessment (DPIA), a document that examines privacy risks before starting a potentially high-risk use of personal data. It checks whether the assessment is required under the GDPR, structures the risk analysis and proposes mitigations.

Use it for new or substantially changed processing activities, such as facial recognition for office access, when you need a structured privacy-risk assessment.

It helps organisations decide whether a planned data use needs a DPIA and document its risks before launch. It also identifies when prior consultation with Spain's data-protection authority may be relevant.

eipd — Skill for Claude Code by betobetico/claude-para-abogados

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add betobetico/claude-para-abogados --skill eipd

Clone the repo

git clone --depth 1 https://github.com/betobetico/claude-para-abogados

Made for: Claude Code.

Or install privacidad, the plugin that ships this one along with the rest of its 3 skills, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/betobetico/claude-para-abogados/eipd/github.svg)](https://agentmods.dev/skills/betobetico/claude-para-abogados/eipd)

Your own site

<a href="https://agentmods.dev/skills/betobetico/claude-para-abogados/eipd"><img src="https://agentmods.dev/badge/skills/betobetico/claude-para-abogados/eipd/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/betobetico/claude-para-abogados/eipd"><img src="https://agentmods.dev/badge/skills/betobetico/claude-para-abogados/eipd.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 115 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,871 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00115	$0.01871
Opus 5.5	$0.00046	$0.00748
Sonnet 5.5	$0.00023	$0.00374
Haiku 4.5	$0.00012	$0.00187

Measured 17d ago against content hash 05cd5a3114fc, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

eipd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

privacidad/skills/eipd/SKILL.md · 185 lines

How it starts

The opening of the file, as written. The whole thing — 185 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/eipd

Cargar ~/.claude/plugins/config/claude-para-abogados/privacidad/CLAUDE.md → formato house de EIPD, proceso, criterios.
Determinar si la EIPD es obligatoria (si hay duda, usar /privacidad:triaje primero).
Recopilar información del tratamiento (preguntar lo que falte).
Generar la EIPD en el formato configurado.
Evaluar si procede consulta previa a la AEPD (art. 36 RGPD).

/privacidad:eipd
Queremos implementar un sistema de reconocimiento facial para control de acceso
en las oficinas.

Propósito

La EIPD es obligatoria cuando un tratamiento entraña alto riesgo para los derechos y libertades de las personas físicas. Es el documento más completo del sistema de accountability del RGPD y debe realizarse antes de iniciar el tratamiento. Este skill genera la EIPD completa siguiendo la estructura del art. 35.7 RGPD y las guías de la AEPD.

Cuándo es obligatoria la EIPD

Supuestos del art. 35.3 RGPD

Evaluación sistemática y exhaustiva de aspectos personales basada en tratamiento automatizado, incluida la elaboración de perfiles, con efectos jurídicos o significativos
Tratamiento a gran escala de categorías especiales de datos (art. 9) o datos de condenas penales (art. 10)
Observación sistemática a gran escala de una zona de acceso público

Lista obligatoria de la AEPD (2019)

La AEPD publicó una lista de tratamientos que requieren EIPD. Incluye, entre otros:

Perfilado (evaluación o predicción de aspectos personales)
Toma de decisiones automatizadas con efectos jurídicos
Observación, geolocalización o control del interesado de forma sistemática
Tratamiento de datos especialmente protegidos o de naturaleza muy personal
Tratamiento de datos a gran escala
Asociación o combinación de conjuntos de datos
Datos de sujetos vulnerables (menores, empleados, pacientes)
Uso innovador de tecnologías
Transferencias internacionales a países sin nivel adecuado
Tratamientos que impidan ejercer derechos o acceder a un servicio/contrato

Read the full file on GitHub · 185 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

17d ago First seen · 185 lines · 115 tokens per session scan A 05cd5a3114fc

Subscribe to this mod's changes

eipd is a skill published in the GitHub repository betobetico/claude-para-abogados (43 stars, last pushed 18d ago), licensed Apache-2.0. It adds 115 tokens to every session and 1,871 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-01.

Legal and compliance

fto-triage

Freedom-to-operate triage — a structured first look at potentially blocking patents, not an FTO opinion. Use when a product, process, or feature is being evaluated for blocking patents, when asked whether anything stops a launch, or to build a claim-chart first pass against the most plausible patents before patent…

anthropics/claude-for-legal · 81 tokens

legal-hold

Issue, refresh, release, or report on legal holds — drafts the hold notice as .docx, updates legalhold fields in log.yaml, and calendars the next refresh. Use when the user says "issue a hold", "refresh hold", "release hold", or asks for a portfolio-wide hold status report.

anthropics/claude-for-legal · 68 tokens

eipd