rodo-dpia-pl

rodo-dpia-pl is a skill for Claude Code from matematicsolutions/awesome-matematic-skills-pl. It costs 288 tokens per session (2,569 once invoked), scanned A, original, MIT.

A Polish-language guide for preparing a Data Protection Impact Assessment (DPIA), called OSOD in Polish, under the EU General Data Protection Regulation (GDPR). It guides the decision on whether an assessment is required and structures the resulting risk document.

In plain words
What is it for?
Use it to assess processing risks, apply the European Data Protection Board's criteria, structure an OSOD, and prepare draft findings for the data controller.
Why use it?
It helps identify high-risk personal-data processing and document the reasoning required by GDPR rules, instead of treating the assessment as a checklist.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the ochrona-danych plugin — 5 skills shipped together

Good fit Use it to assess processing risks, apply the European Data Protection Board's criteria, structure an OSOD, and prepare draft findings for the data controller.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add matematicsolutions/awesome-matematic-skills-pl --skill rodo-dpia-pl
Clone the repo
git clone --depth 1 https://github.com/matematicsolutions/awesome-matematic-skills-pl

Made for: Claude Code.

Or install ochrona-danych, the plugin that ships this one along with the rest of its 5 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for rodo-dpia-pl

README.md
[![agentmods](https://agentmods.dev/badge/skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl/github.svg)](https://agentmods.dev/skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl)
Your own site
<a href="https://agentmods.dev/skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl"><img src="https://agentmods.dev/badge/skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for rodo-dpia-pl

Your own site · 80×15
<a href="https://agentmods.dev/skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl"><img src="https://agentmods.dev/badge/skills/matematicsolutions/awesome-matematic-skills-pl/rodo-dpia-pl.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 288 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,569 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00288 $0.02569
Opus 5.5 $0.00115 $0.01028
Sonnet 5.5 $0.00058 $0.00514
Haiku 4.5 $0.00029 $0.00257

Measured 17d ago against content hash c35add6eed0e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

rodo-dpia-pl scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/dpia_screening.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

ochrona-danych/skills/rodo-dpia-pl/SKILL.md · 124 lines

How it starts

The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.

RODO DPIA PL - ocena skutków dla ochrony danych (art. 35-36 RODO)

Filozofia

DPIA to nie formularz do odhaczenia, lecz proces zarządzania ryzykiem dla praw i wolności osób. Skill prowadzi proces i składa draft - rozstrzygnięcie (czy ryzyko jest akceptowalne, czy wdrożyć system) należy do administratora. Każde powołanie na decyzję/karę UODO przepuść przez [[uodo-grounding-pl]] przed wpisaniem do dokumentu.

Krok 1 - Czy DPIA jest WYMAGANE (próg art. 35 ust. 1)

DPIA jest obowiązkowe, przed rozpoczęciem przetwarzania, gdy przetwarzanie może powodować wysokie ryzyko. Trzy ścieżki:

  1. Wykaz Prezesa UODO (art. 35 ust. 4; komunikat z 17 czerwca 2019 r., M.P. poz. 666) - lista kryteriów z przykładami, oparta na WP248: co do zasady przetwarzanie spełniające co najmniej dwa kryteria wymaga DPIA, w niektórych przypadkach wystarczy jedno. Kryteria obejmują m.in. ocenę i profilowanie, zautomatyzowane decyzje, systematyczny monitoring miejsc dostępnych publicznie z rozpoznawaniem cech (bez zwykłego monitoringu wizyjnego nagrywanego na potrzeby incydentów), dane szczególnych kategorii, dane biometryczne i genetyczne. Przykłady w wykazie są ilustracyjne.
  2. 9 kryteriów WP248 (Grupa Robocza Art. 29, WP248 rev.01) - reguła kciuka: >=2 kryteria spełnione => DPIA w większości przypadków, czasem wystarczy jedno. Kryteria: ocena/scoring, zautomatyzowane decyzje o skutkach prawnych lub podobnie istotnych (art. 22), systematyczny monitoring, dane szczególne/wysoce osobiste, dane na dużą skalę, łączenie/zestawianie zbiorów, osoby wymagające szczególnej opieki (dzieci, pracownicy), innowacyjne zastosowanie rozwiązań technologicznych lub organizacyjnych (przykłady z WP248: łączenie odcisków palców z rozpoznawaniem twarzy, Internet rzeczy), przetwarzanie uniemożliwiające realizację prawa lub korzystanie z usługi albo umowy.
  3. Art. 35 ust. 3 - obligatoryjne przypadki: a) systematyczna, kompleksowa ocena czynników osobowych oparta na zautomatyzowanym przetwarzaniu, w tym profilowaniu, która jest podstawą decyzji wywołujących skutki prawne lub w podobny sposób znacząco wpływających na osobę; b) dane szczególnych kategorii (art. 9 ust. 1) lub dotyczące wyroków skazujących (art. 10) na dużą skalę; c) systematyczny monitoring miejsc dostępnych publicznie na dużą skalę.

Read the full file on GitHub · 124 lines

Files

What ships with it

2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 17d ago Changed · +12 lines · +3 tokens per session c35add6eed0e
  2. 21d ago Changed · +21 lines 7be9c46acca1
  3. 1mo ago First seen · 91 lines · 285 tokens per session scan A 8133b74c4e1b

Subscribe to this mod's changes

rodo-dpia-pl is a skill published in the GitHub repository matematicsolutions/awesome-matematic-skills-pl (8 stars, last pushed 8d ago), licensed MIT. It adds 288 tokens to every session and 2,569 once invoked, about $0.0012 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

mqc-timeline-master

Turn raw case materials into a faithful, court-ready case timeline (SVG + PNG + PPTX + VSDX + drawio, plus a traceability index in Word). Use this whenever the user hands over litigation materials — a judgment, complaint, defence, evidence list, contract, bank or Alipay statement, WeChat screenshots, scanned exhibits…

zeweihan/aiworkdeck · 269 tokens

mqc-litigation-visual-redraw

Redraw a litigation diagram into a restrained, court-ready presentation graphic (SVG + PNG) WITHOUT changing any text or legal meaning. Use this whenever the user supplies a case timeline, a legal process flowchart, OR a party/relationship diagram and wants it cleaned up, beautified, redrawn, made professional…

zeweihan/aiworkdeck · 257 tokens

universal-standards

LegalAnt operating protocol — HITL gates, citation completeness, hallucination defence, Indian law default, data security, and mandatory disclaimer. Applies to every agent on every matter.

ishwarjha/legalant · 41 tokens

niw-package-review

Reviews an assembled EB-2 NIW petition package before filing, as a skeptical adjudicator would. Reads the actual exhibits, recommendation letters and petition draft, tests each Dhanasar prong against the preponderance standard on documented evidence only, quotes the specific petition passages that overclaim, and…

thepaperscompany/niw-skills · 161 tokens

niw-rfe-response

Works a USCIS Request for Evidence or Notice of Intent to Deny on an EB-2 NIW petition, from reading the notice through to a drafted response. Reads the printed deadline rather than computing one, crosswalks each contested issue against the record as actually filed, stops for the petitioner to correct what it found…

thepaperscompany/niw-skills · 0 tokens

indian-law-defaults

Indian statute and regulatory hierarchy defaults. All agents assume Indian jurisdiction unless overridden. Auto-triggers FEMA for foreign counterparties and SEBI LODR for listed entities.

ishwarjha/legalant · 39 tokens