← All skills
Tencent SkillHub · Security & Compliance

Gdpr Dsgvo Expert

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, and data subject rights management.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, and data subject rights management.

⬇ 0 downloads ★ 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
SKILL.md, references/dpia_methodology.md, references/gdpr_compliance_guide.md, references/german_bdsg_requirements.md, scripts/data_subject_rights_tracker.py, scripts/dpia_generator.py

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
2.1.1

Documentation

ClawHub primary doc Primary doc: SKILL.md 15 sections Open source page

GDPR/DSGVO Expert

Tools and guidance for EU General Data Protection Regulation (GDPR) and German Bundesdatenschutzgesetz (BDSG) compliance.

Table of Contents

Tools GDPR Compliance Checker DPIA Generator Data Subject Rights Tracker Reference Guides Workflows

GDPR Compliance Checker

Scans codebases for potential GDPR compliance issues including personal data patterns and risky code practices. # Scan a project directory python scripts/gdpr_compliance_checker.py /path/to/project # JSON output for CI/CD integration python scripts/gdpr_compliance_checker.py . --json --output report.json Detects: Personal data patterns (email, phone, IP addresses) Special category data (health, biometric, religion) Financial data (credit cards, IBAN) Risky code patterns: Logging personal data Missing consent mechanisms Indefinite data retention Unencrypted sensitive data Disabled deletion functionality Output: Compliance score (0-100) Risk categorization (critical, high, medium) Prioritized recommendations with GDPR article references

DPIA Generator

Generates Data Protection Impact Assessment documentation following Art. 35 requirements. # Get input template python scripts/dpia_generator.py --template > input.json # Generate DPIA report python scripts/dpia_generator.py --input input.json --output dpia_report.md Features: Automatic DPIA threshold assessment Risk identification based on processing characteristics Legal basis requirements documentation Mitigation recommendations Markdown report generation DPIA Triggers Assessed: Systematic monitoring (Art. 35(3)(c)) Large-scale special category data (Art. 35(3)(b)) Automated decision-making (Art. 35(3)(a)) WP29 high-risk criteria

Data Subject Rights Tracker

Manages data subject rights requests under GDPR Articles 15-22. # Add new request python scripts/data_subject_rights_tracker.py add \ --type access --subject "John Doe" --email "john@example.com" # List all requests python scripts/data_subject_rights_tracker.py list # Update status python scripts/data_subject_rights_tracker.py status --id DSR-202601-0001 --update verified # Generate compliance report python scripts/data_subject_rights_tracker.py report --output compliance.json # Generate response template python scripts/data_subject_rights_tracker.py template --id DSR-202601-0001 Supported Rights: RightArticleDeadlineAccessArt. 1530 daysRectificationArt. 1630 daysErasureArt. 1730 daysRestrictionArt. 1830 daysPortabilityArt. 2030 daysObjectionArt. 2130 daysAutomated decisionsArt. 2230 days Features: Deadline tracking with overdue alerts Identity verification workflow Response template generation Compliance reporting

GDPR Compliance Guide

references/gdpr_compliance_guide.md Comprehensive implementation guidance covering: Legal bases for processing (Art. 6) Special category requirements (Art. 9) Data subject rights implementation Accountability requirements (Art. 30) International transfers (Chapter V) Breach notification (Art. 33-34)

German BDSG Requirements

references/german_bdsg_requirements.md German-specific requirements including: DPO appointment threshold (§ 38 BDSG - 20+ employees) Employment data processing (§ 26 BDSG) Video surveillance rules (§ 4 BDSG) Credit scoring requirements (§ 31 BDSG) State data protection laws (Landesdatenschutzgesetze) Works council co-determination rights

DPIA Methodology

references/dpia_methodology.md Step-by-step DPIA process: Threshold assessment criteria WP29 high-risk indicators Risk assessment methodology Mitigation measure categories DPO and supervisory authority consultation Templates and checklists

Workflow 1: New Processing Activity Assessment

Step 1: Run compliance checker on codebase → python scripts/gdpr_compliance_checker.py /path/to/code Step 2: Review findings and compliance score → Address critical and high issues Step 3: Determine if DPIA required → Check references/dpia_methodology.md threshold criteria Step 4: If DPIA required, generate assessment → python scripts/dpia_generator.py --template > input.json → Fill in processing details → python scripts/dpia_generator.py --input input.json --output dpia.md Step 5: Document in records of processing activities

Workflow 2: Data Subject Request Handling

Step 1: Log request in tracker → python scripts/data_subject_rights_tracker.py add --type [type] ... Step 2: Verify identity (proportionate measures) → python scripts/data_subject_rights_tracker.py status --id [ID] --update verified Step 3: Gather data from systems → python scripts/data_subject_rights_tracker.py status --id [ID] --update in_progress Step 4: Generate response → python scripts/data_subject_rights_tracker.py template --id [ID] Step 5: Send response and complete → python scripts/data_subject_rights_tracker.py status --id [ID] --update completed Step 6: Monitor compliance → python scripts/data_subject_rights_tracker.py report

Workflow 3: German BDSG Compliance Check

Step 1: Determine if DPO required → 20+ employees processing personal data automatically → OR processing requires DPIA → OR business involves data transfer/market research Step 2: If employees involved, review § 26 BDSG → Document legal basis for employee data → Check works council requirements Step 3: If video surveillance, comply with § 4 BDSG → Install signage → Document necessity → Limit retention Step 4: Register DPO with supervisory authority → See references/german_bdsg_requirements.md for authority list

Legal Bases (Art. 6)

Consent: Marketing, newsletters, analytics (must be freely given, specific, informed) Contract: Order fulfillment, service delivery Legal obligation: Tax records, employment law Legitimate interests: Fraud prevention, security (requires balancing test)

Special Category Data (Art. 9)

Requires explicit consent or Art. 9(2) exception: Health data Biometric data Racial/ethnic origin Political opinions Religious beliefs Trade union membership Genetic data Sexual orientation

Data Subject Rights

All rights must be fulfilled within 30 days (extendable to 90 for complex requests): Access: Provide copy of data and processing information Rectification: Correct inaccurate data Erasure: Delete data (with exceptions for legal obligations) Restriction: Limit processing while issues are resolved Portability: Provide data in machine-readable format Object: Stop processing based on legitimate interests

German BDSG Additions

TopicBDSG SectionKey RequirementDPO threshold§ 3820+ employees = mandatory DPOEmployment§ 26Detailed employee data rulesVideo§ 4Signage and proportionalityScoring§ 31Explainable algorithms

Category context

Identity, auth, scanning, governance, audit, and operational guardrails.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
4 Docs2 Scripts
  • SKILL.md Primary doc
  • references/dpia_methodology.md Docs
  • references/gdpr_compliance_guide.md Docs
  • references/german_bdsg_requirements.md Docs
  • scripts/data_subject_rights_tracker.py Scripts
  • scripts/dpia_generator.py Scripts