A report generator for GDPR Data Protection Impact Assessments, or DPIAs. A DPIA is a review of how a project handles personal data and what privacy risks it creates.

Reporting which projects need a DPIA, their OneTrust IDs, current status, submission dates, approvers, risk levels, follow-up owners, data activities, and outstanding issues.

It gathers compliance information from project files and a DPIA tracker instead of requiring a manual review of every project. It highlights status, risk, ownership, dates, and blockers.

dpia-status — Skill for Claude Code by DavidROliverBA

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add DavidROliverBA/ArchitectKB --skill dpia-status

Clone the repo

git clone --depth 1 https://github.com/DavidROliverBA/ArchitectKB

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/davidroliverba/architectkb/dpia-status/github.svg)](https://agentmods.dev/skills/davidroliverba/architectkb/dpia-status)

Your own site

<a href="https://agentmods.dev/skills/davidroliverba/architectkb/dpia-status"><img src="https://agentmods.dev/badge/skills/davidroliverba/architectkb/dpia-status/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/davidroliverba/architectkb/dpia-status"><img src="https://agentmods.dev/badge/skills/davidroliverba/architectkb/dpia-status.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,628 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00000	$0.01628
Opus 5	$0.00000	$0.00814
Sonnet 5	$0.00000	$0.00326
Haiku 4.5	$0.00000	$0.00163

Measured 10d ago against content hash 2772db8face8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

dpia-status scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/dpia-status/SKILL.md · 217 lines

How it starts

The opening of the file, as written. The whole thing — 217 lines — stays where its author put it; the contents beside it link to each section on GitHub.

DPIA Status Skill

Purpose

Generate comprehensive GDPR Data Protection Impact Assessment (DPIA) compliance status reports across all engineering projects.

Usage

/dpia-status - Current DPIA status for all projects
/dpia-status pending - Only pending/in-progress DPIAs
/dpia-status project [name] - DPIA status for specific project

Instructions

When this skill is invoked:

Read DPIA Tracker page:
```
Page - DPIA Tracker.md
```
Extract DPIA information:
- Projects requiring DPIA
- OneTrust IDs
- Current status (not required, threshold assessment, in progress, approved, rejected)
- Submission dates
- Approvers
- Risk levels
- Follow-up owners
Find all projects with DPIA requirements using Grep:
```
pattern: "DPIA"
output: files_with_matches
```
Read relevant project files to get:
- Project status and timeline
- Data processing activities
- Personal data categories
- DPIA submission dates
- Blockers or issues
Generate formatted status report:

Report Structure

# DPIA Compliance Status Report

**Generated**: [current date]
**Data Source**: [[Page - DPIA Tracker]]
**OneTrust Platform**: [[Weblink - OneTrust DPIA System]]

## Executive Summary

- **Total Projects Tracked**: [count]
- **DPIAs Not Required**: [count]
- **Threshold Assessments Complete**: [count]
- **DPIAs In Progress**: [count]
- **DPIAs Approved**: [count]
- **Projects Requiring Action**: [count]

## Status by Category

### ✅ DPIA Not Required ([count] projects)

| Project          | Justification                      | Reviewed   |
| ---------------- | ---------------------------------- | ---------- |
| [[Project Name]] | Low risk, no special category data | YYYY-MM-DD |

### ⏳ Threshold Assessment Complete ([count] projects)

| Project           | OneTrust ID | Completed  | Next Action                 |
| ----------------- | ----------- | ---------- | --------------------------- |
| [[VendorTooling]] | 6285        | YYYY-MM-DD | Awaiting full DPIA decision |

### 🔄 DPIAs Under Review ([count] projects)

| Project       | OneTrust ID | Submitted  | Approver | Owner        | Days Pending |
| ------------- | ----------- | ---------- | -------- | ------------ | ------------ |
| [[VendorPLM]] | 6284        | YYYY-MM-DD | DPO      | [[Jane Doe]] | [X] days     |
| [[SPARK]]     | 6276        | YYYY-MM-DD | DPO      | [[Jane Doe]] | [X] days     |

### ✅ DPIAs Approved ([count] projects)

| Project          | OneTrust ID | Approved   | Valid Until | Notes             |
| ---------------- | ----------- | ---------- | ----------- | ----------------- |
| [[Project Name]] | XXXX        | YYYY-MM-DD | YYYY-MM-DD  | Conditions: [...] |

### ❌ DPIAs Rejected or Requiring Remediation ([count] projects)

| Project     | OneTrust ID | Status   | Issues                  | Owner     | Action Required         |
| ----------- | ----------- | -------- | ----------------------- | --------- | ----------------------- |
| [[Project]] | XXXX        | Rejected | Data retention concerns | [[Owner]] | Update retention policy |

## Projects Requiring Immediate Action

### High Priority (DPIAs Overdue or Blocked)

1. **[[Project Name]]**
   - Status: Threshold assessment overdue
   - Owner: [[Person]]
   - Action: Complete assessment in OneTrust
   - Due: YYYY-MM-DD

### Medium Priority (DPIAs In Progress >30 days)

1. **[[VendorPLM SaaS Migration]]**
   - Status: Under review for [X] days
   - Owner: [[Jane Doe]]
   - Action: Follow up with DPO
   - OneTrust ID: 6284

## DPIA Status by Project

### [[Project - VendorPLM SaaS Migration]]

- **OneTrust ID**: 6284
- **Status**: Under review by YourOrg Data Protection Officer
- **Submitted**: 2025-10-08
- **Owner**: [[Jane Doe]]
- **Risk Level**: [High/Medium/Low]
- **Personal Data**: [Types of data processed]
- **Next Steps**: Awaiting DPO approval
- **Timeline**: [Expected approval date]

### [[Project - VendorTooling Tooling - v9 Upgrade]]

- **OneTrust ID**: 6285
- **Status**: Threshold assessment completed
- **Completed**: YYYY-MM-DD
- **Owner**: [[Owner]]
- **Outcome**: [DPIA required/not required]
- **Next Steps**: [Based on outcome]

## Compliance Metrics

### DPIA Timeline Performance

- Average days to complete threshold assessment: [X] days
- Average days for DPIA approval: [X] days
- Projects meeting DPIA deadline: [X]%

### Risk Distribution

- High Risk Projects: [count]
- Medium Risk Projects: [count]
- Low Risk Projects: [count]

## Recommendations

1. **Immediate Actions:**
   - [Projects requiring urgent DPIA submission]
   - [Follow-ups needed with DPO]

2. **Process Improvements:**
   - [Suggestions for streamlining DPIA process]
   - [Training needs identified]

3. **Upcoming DPIAs:**
   - [Projects in pipeline requiring DPIA]
   - [Proactive planning recommendations]

## Follow-up Schedule

| Project     | Owner     | Next Review | Action             |
| ----------- | --------- | ----------- | ------------------ |
| [[Project]] | [[Owner]] | YYYY-MM-DD  | Follow up with DPO |

## Related Resources

- [[Page - DPIA Tracker]] - Central DPIA tracking page
- [[Weblink - OneTrust DPIA System]] - OneTrust platform
- [[Project - SecurityEnhancement]] - Security compliance programme

Read the full file on GitHub · 217 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago First seen · 217 lines · 0 tokens per session scan A 2772db8face8

Subscribe to this mod's changes

dpia-status is a skill published in the GitHub repository DavidROliverBA/ArchitectKB (52 stars, last pushed 6mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,628 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Legal and compliance

specification-writing

A workflow for writing complete patent specifications from patent claims and an invention disclosure. It adapts the document to a chosen jurisdiction, such as the US, Europe, or China.

wanshuiyin/Auto-claude-code-research-in-sleep · 49 tokens

regulatory-research-fallback

Fallback workflow for regulatory research when web extraction tools fail on government PDFs.

HKUDS/OpenSpace · 20 tokens

x-scorecard

OpenSSF Scorecard for assessing open source project security. Check security best practices and compliance. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.

x-cmd/x-cmd · 57 tokens

memstack-business-gdpr

Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR…

cwinvestments/memstack · 121 tokens

gesellschaftsrechtliche-satzungen-agb

Für Gesellschaftsrechtliche Satzungen AGB Abgrenzung: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Prüfprodukt mit Risiko und nächstem Schritt. Fachgebiet: AGB-Recht-Prüfer. Route: gesellschaftsrechtliche-satzungen-agb.

Klotzkette/claude-fuer-deutsches-recht · 69 tokens

nda-review

Use when the user uploads or pastes a non-disclosure agreement and asks for review, redline, risk assessment, or a recommendation on whether to sign. Identifies missing standard protections, one-sided or unusual provisions, and operational issues; produces a structured report with severity ratings and citations to…

LegalQuants/lq-ai · 79 tokens