# Send Gdpr Dsgvo Expert to your agent
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
## Fast path
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
## Suggested prompts
### New install

```text
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
```
### Upgrade existing

```text
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
```
## Machine-readable fields
```json
{
  "schemaVersion": "1.0",
  "item": {
    "slug": "gdpr-dsgvo-expert",
    "name": "Gdpr Dsgvo Expert",
    "source": "tencent",
    "type": "skill",
    "category": "安全合规",
    "sourceUrl": "https://clawhub.ai/alirezarezvani/gdpr-dsgvo-expert",
    "canonicalUrl": "https://clawhub.ai/alirezarezvani/gdpr-dsgvo-expert",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadUrl": "/downloads/gdpr-dsgvo-expert",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=gdpr-dsgvo-expert",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "packageFormat": "ZIP package",
    "primaryDoc": "SKILL.md",
    "includedAssets": [
      "SKILL.md",
      "references/dpia_methodology.md",
      "references/gdpr_compliance_guide.md",
      "references/german_bdsg_requirements.md",
      "scripts/data_subject_rights_tracker.py",
      "scripts/dpia_generator.py"
    ],
    "downloadMode": "redirect",
    "sourceHealth": {
      "source": "tencent",
      "status": "healthy",
      "reason": "direct_download_ok",
      "recommendedAction": "download",
      "checkedAt": "2026-04-23T16:43:11.935Z",
      "expiresAt": "2026-04-30T16:43:11.935Z",
      "httpStatus": 200,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard",
      "contentType": "application/zip",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard",
        "contentDisposition": "attachment; filename=\"4claw-imageboard-1.0.1.zip\"",
        "redirectLocation": null,
        "bodySnippet": null
      },
      "scope": "source",
      "summary": "Source download looks usable.",
      "detail": "Yavira can redirect you to the upstream package for this source.",
      "primaryActionLabel": "Download for OpenClaw",
      "primaryActionHref": "/downloads/gdpr-dsgvo-expert"
    },
    "validation": {
      "installChecklist": [
        "Use the Yavira download entry.",
        "Review SKILL.md after the package is downloaded.",
        "Confirm the extracted package contains the expected setup assets."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    }
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/gdpr-dsgvo-expert",
    "downloadUrl": "https://openagent3.xyz/downloads/gdpr-dsgvo-expert",
    "agentUrl": "https://openagent3.xyz/skills/gdpr-dsgvo-expert/agent",
    "manifestUrl": "https://openagent3.xyz/skills/gdpr-dsgvo-expert/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/gdpr-dsgvo-expert/agent.md"
  }
}
```
## Documentation

### GDPR/DSGVO Expert

Tools and guidance for EU General Data Protection Regulation (GDPR) and German Bundesdatenschutzgesetz (BDSG) compliance.

### Table of Contents

Tools

GDPR Compliance Checker
DPIA Generator
Data Subject Rights Tracker


Reference Guides
Workflows

### GDPR Compliance Checker

Scans codebases for potential GDPR compliance issues including personal data patterns and risky code practices.

# Scan a project directory
python scripts/gdpr_compliance_checker.py /path/to/project

# JSON output for CI/CD integration
python scripts/gdpr_compliance_checker.py . --json --output report.json

Detects:

Personal data patterns (email, phone, IP addresses)
Special category data (health, biometric, religion)
Financial data (credit cards, IBAN)
Risky code patterns:

Logging personal data
Missing consent mechanisms
Indefinite data retention
Unencrypted sensitive data
Disabled deletion functionality

Output:

Compliance score (0-100)
Risk categorization (critical, high, medium)
Prioritized recommendations with GDPR article references

### DPIA Generator

Generates Data Protection Impact Assessment documentation following Art. 35 requirements.

# Get input template
python scripts/dpia_generator.py --template > input.json

# Generate DPIA report
python scripts/dpia_generator.py --input input.json --output dpia_report.md

Features:

Automatic DPIA threshold assessment
Risk identification based on processing characteristics
Legal basis requirements documentation
Mitigation recommendations
Markdown report generation

DPIA Triggers Assessed:

Systematic monitoring (Art. 35(3)(c))
Large-scale special category data (Art. 35(3)(b))
Automated decision-making (Art. 35(3)(a))
WP29 high-risk criteria

### Data Subject Rights Tracker

Manages data subject rights requests under GDPR Articles 15-22.

# Add new request
python scripts/data_subject_rights_tracker.py add \\
  --type access --subject "John Doe" --email "john@example.com"

# List all requests
python scripts/data_subject_rights_tracker.py list

# Update status
python scripts/data_subject_rights_tracker.py status --id DSR-202601-0001 --update verified

# Generate compliance report
python scripts/data_subject_rights_tracker.py report --output compliance.json

# Generate response template
python scripts/data_subject_rights_tracker.py template --id DSR-202601-0001

Supported Rights:

RightArticleDeadlineAccessArt. 1530 daysRectificationArt. 1630 daysErasureArt. 1730 daysRestrictionArt. 1830 daysPortabilityArt. 2030 daysObjectionArt. 2130 daysAutomated decisionsArt. 2230 days

Features:

Deadline tracking with overdue alerts
Identity verification workflow
Response template generation
Compliance reporting

### GDPR Compliance Guide

references/gdpr_compliance_guide.md

Comprehensive implementation guidance covering:

Legal bases for processing (Art. 6)
Special category requirements (Art. 9)
Data subject rights implementation
Accountability requirements (Art. 30)
International transfers (Chapter V)
Breach notification (Art. 33-34)

### German BDSG Requirements

references/german_bdsg_requirements.md

German-specific requirements including:

DPO appointment threshold (§ 38 BDSG - 20+ employees)
Employment data processing (§ 26 BDSG)
Video surveillance rules (§ 4 BDSG)
Credit scoring requirements (§ 31 BDSG)
State data protection laws (Landesdatenschutzgesetze)
Works council co-determination rights

### DPIA Methodology

references/dpia_methodology.md

Step-by-step DPIA process:

Threshold assessment criteria
WP29 high-risk indicators
Risk assessment methodology
Mitigation measure categories
DPO and supervisory authority consultation
Templates and checklists

### Workflow 1: New Processing Activity Assessment

Step 1: Run compliance checker on codebase
        → python scripts/gdpr_compliance_checker.py /path/to/code

Step 2: Review findings and compliance score
        → Address critical and high issues

Step 3: Determine if DPIA required
        → Check references/dpia_methodology.md threshold criteria

Step 4: If DPIA required, generate assessment
        → python scripts/dpia_generator.py --template > input.json
        → Fill in processing details
        → python scripts/dpia_generator.py --input input.json --output dpia.md

Step 5: Document in records of processing activities

### Workflow 2: Data Subject Request Handling

Step 1: Log request in tracker
        → python scripts/data_subject_rights_tracker.py add --type [type] ...

Step 2: Verify identity (proportionate measures)
        → python scripts/data_subject_rights_tracker.py status --id [ID] --update verified

Step 3: Gather data from systems
        → python scripts/data_subject_rights_tracker.py status --id [ID] --update in_progress

Step 4: Generate response
        → python scripts/data_subject_rights_tracker.py template --id [ID]

Step 5: Send response and complete
        → python scripts/data_subject_rights_tracker.py status --id [ID] --update completed

Step 6: Monitor compliance
        → python scripts/data_subject_rights_tracker.py report

### Workflow 3: German BDSG Compliance Check

Step 1: Determine if DPO required
        → 20+ employees processing personal data automatically
        → OR processing requires DPIA
        → OR business involves data transfer/market research

Step 2: If employees involved, review § 26 BDSG
        → Document legal basis for employee data
        → Check works council requirements

Step 3: If video surveillance, comply with § 4 BDSG
        → Install signage
        → Document necessity
        → Limit retention

Step 4: Register DPO with supervisory authority
        → See references/german_bdsg_requirements.md for authority list

### Legal Bases (Art. 6)

Consent: Marketing, newsletters, analytics (must be freely given, specific, informed)
Contract: Order fulfillment, service delivery
Legal obligation: Tax records, employment law
Legitimate interests: Fraud prevention, security (requires balancing test)

### Special Category Data (Art. 9)

Requires explicit consent or Art. 9(2) exception:

Health data
Biometric data
Racial/ethnic origin
Political opinions
Religious beliefs
Trade union membership
Genetic data
Sexual orientation

### Data Subject Rights

All rights must be fulfilled within 30 days (extendable to 90 for complex requests):

Access: Provide copy of data and processing information
Rectification: Correct inaccurate data
Erasure: Delete data (with exceptions for legal obligations)
Restriction: Limit processing while issues are resolved
Portability: Provide data in machine-readable format
Object: Stop processing based on legitimate interests

### German BDSG Additions

TopicBDSG SectionKey RequirementDPO threshold§ 3820+ employees = mandatory DPOEmployment§ 26Detailed employee data rulesVideo§ 4Signage and proportionalityScoring§ 31Explainable algorithms
## Trust
- Source: tencent
- Verification: Indexed source record
- Publisher: alirezarezvani
- Version: 2.1.1
## Source health
- Status: healthy
- Source download looks usable.
- Yavira can redirect you to the upstream package for this source.
- Health scope: source
- Reason: direct_download_ok
- Checked at: 2026-04-23T16:43:11.935Z
- Expires at: 2026-04-30T16:43:11.935Z
- Recommended action: Download for OpenClaw
## Links
- [Detail page](https://openagent3.xyz/skills/gdpr-dsgvo-expert)
- [Send to Agent page](https://openagent3.xyz/skills/gdpr-dsgvo-expert/agent)
- [JSON manifest](https://openagent3.xyz/skills/gdpr-dsgvo-expert/agent.json)
- [Markdown brief](https://openagent3.xyz/skills/gdpr-dsgvo-expert/agent.md)
- [Download page](https://openagent3.xyz/downloads/gdpr-dsgvo-expert)