gdpr-compliance

gdpr-compliance is a skill for Claude Code, Codex from guia-matthieu/clawfu-skills. It costs 25 tokens per session (2,517 once invoked), scanned A, original, MIT.

A guide to applying the European Union's GDPR privacy law to marketing work. It covers consent, data processing, privacy notices, and requests from people whose data you hold.

In plain words
What is it for?
Use it when designing consent flows, writing privacy notices, checking lawful bases for processing, or handling data subject requests.
Why use it?
It helps identify gaps in marketing data practices and clarify what must be documented before collecting or using personal data.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it when designing consent flows, writing privacy notices, checking lawful bases for processing, or handling data subject requests.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/guia-matthieu/clawfu-skills/gdpr-compliance
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add guia-matthieu/clawfu-skills --skill gdpr-compliance
Clone the repo
git clone --depth 1 https://github.com/guia-matthieu/clawfu-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for gdpr-compliance

README.md
[![agentmods](https://agentmods.dev/badge/skills/guia-matthieu/clawfu-skills/gdpr-compliance/github.svg)](https://agentmods.dev/skills/guia-matthieu/clawfu-skills/gdpr-compliance)
Your own site
<a href="https://agentmods.dev/skills/guia-matthieu/clawfu-skills/gdpr-compliance"><img src="https://agentmods.dev/badge/skills/guia-matthieu/clawfu-skills/gdpr-compliance/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for gdpr-compliance

Your own site · 80×15
<a href="https://agentmods.dev/skills/guia-matthieu/clawfu-skills/gdpr-compliance"><img src="https://agentmods.dev/badge/skills/guia-matthieu/clawfu-skills/gdpr-compliance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 25 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,517 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00025 $0.02517
Opus 5 $0.00013 $0.01259
Sonnet 5 $0.00005 $0.00503
Haiku 4.5 $0.00003 $0.00252

Measured 9d ago against content hash c7cd116d3774, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

gdpr-compliance scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/legal/gdpr-compliance/SKILL.md · 414 lines

How it starts

The opening of the file, as written. The whole thing — 414 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GDPR Compliance for Marketing

Ensure your marketing activities comply with GDPR requirements for consent, data processing, and privacy rights.

When to Use This Skill

  • Designing consent collection flows
  • Writing privacy notices
  • Auditing marketing data practices
  • Handling data subject requests
  • Documenting lawful basis

Methodology Foundation

Based on GDPR Articles 6, 7, 12-23 and EDPB Guidelines, covering:

  • Lawful basis determination
  • Consent requirements
  • Transparency obligations
  • Data subject rights
  • Documentation requirements

What Claude Does vs What You Decide

Claude Does You Decide
Explains GDPR requirements Business risk tolerance
Drafts compliant language Implementation priority
Identifies gaps Legal interpretation
Creates documentation DPO consultation needs
Suggests controls Resource allocation

Instructions

Step 1: Lawful Basis Assessment

Six Lawful Bases (Article 6):

Basis Marketing Use Documentation Needed
Consent Email marketing, cookies, tracking Consent records
Contract Customer communications Contract terms
Legitimate Interest Soft opt-in, B2B marketing LIA document
Legal Obligation Regulatory comms Legal reference
Vital Interest Rarely applicable -
Public Task Rarely applicable -

Marketing Activity Mapping:

Activity Typical Basis Requirements
Email newsletter Consent Double opt-in, easy unsubscribe
Existing customer upsell Legitimate Interest LIA, opt-out available
Cold B2B outreach Legitimate Interest LIA, clear identity
Website cookies Consent Banner, granular choices
Retargeting ads Consent Cookie consent
Lead magnets Consent Clear purpose, separate consent

Step 2: Consent Requirements

Valid Consent Criteria (Article 7):

Requirement What It Means Example
Freely given No bundling, no penalty Separate from T&Cs
Specific Clear purpose stated "Marketing emails about [X]"
Informed Who, what, why explained Privacy notice linked
Unambiguous Clear affirmative action Unchecked checkbox
Withdrawable Easy to revoke One-click unsubscribe

Read the full file on GitHub · 414 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 414 lines · 25 tokens per session scan A c7cd116d3774

Subscribe to this mod's changes

gdpr-compliance is a skill published in the GitHub repository guia-matthieu/clawfu-skills (149 stars, last pushed 5mo ago), licensed MIT. It adds 25 tokens to every session and 2,517 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

faktura-paminnelse-svensk

Hanterar fakturapåminnelser och inkasso enligt svensk lagstiftning. Identifierar förfallna fakturor i Bokio, beräknar korrekt påminnelseavgift (max 60 kr) och dröjsmålsränta (referensränta + 8 procentenheter), upprättar tröskel innan inkassoärende, och genererar utkast till påminnelsemejl, andra påminnelse…

seabasst/claude-smb-sverige · 276 tokens

agi-arbetsgivardeklaration

Förbereder och sammanställer arbetsgivardeklaration på individnivå (AGI) för månatlig inlämning till Skatteverket. Hämtar löneunderlag från Bokio, kontrollerar att arbetsgivaravgifter, skatteavdrag, förmåner och ersättningar är korrekt bokförda per anställd, och producerar både totalsumman för betalning och…

seabasst/claude-smb-sverige · 260 tokens

f-skatt-bolagskontroll

Verifierar nya leverantörer, kunder eller samarbetspartners genom att kontrollera F-skattestatus hos Skatteverket, registreringsdata hos Bolagsverket, och eventuella betalningsanmärkningar via tillgängliga källor. Skydd mot att betala till bolag som tappat F-skatt (vilket gör dig skyldig för deras skatter och…

seabasst/claude-smb-sverige · 250 tokens

periodisk-sammanstallning

Sammanställer kvartalsvis periodisk sammanställning för EU-försäljning (varor och tjänster), validerar köparnas VAT-nummer mot VIES, och förbereder underlag för inlämning till Skatteverket. Använd skillen när användaren nämner "periodisk sammanställning", "EU-försäljning", "VIES", "moms EU", "kvartalsrapport EU"…

seabasst/claude-smb-sverige · 139 tokens

semester-berakning

Beräknar semesterlön, semesterersättning och sparade semesterdagar enligt svenska Semesterlagen (1977:480). Hanterar både 12 %-regeln (vanlig för månadslön) och sammalöneprincipen. Använd skillen när användaren nämner "semester", "semesterlön", "semesterersättning", "sparade semesterdagar", "semesterlönegrundande"…

seabasst/claude-smb-sverige · 156 tokens

beweislast-und-zugang-309

Für Beweislast und Zugang 309: ordnet Norm, Beweislast und Gegenargument; Ergebnis: Beweislast- und Substantiierungsmatrix.

Klotzkette/claude-fuer-deutsches-recht · 43 tokens