Privacy Compliance Checker
Audit code and data flows for GDPR/CCPA compliance violations
What You Can Do
You can systematically audit your code and data flows to uncover privacy compliance risks across GDPR, CCPA, and other regulatory frameworks. The skill maps where personally identifiable information is collected, processed, stored, and transmitted—then validates that consent mechanisms, data minimization practices, retention policies, and deletion implementations meet legal requirements. This catches compliance gaps early, before they result in regulatory fines or enforcement actions.
Features
Identifies all collection, processing, storage, and transmission points for personal data
Checks that consent mechanisms are properly implemented, documented, and auditable
Verifies you're only collecting and retaining data necessary for stated purposes
Ensures data retention schedules align with GDPR/CCPA timelines and legal holds
Confirms GDPR Article 17 and CCPA deletion request implementations work end-to-end
Flags unreachable or undocumented data storage locations
Identifies privacy gaps created by vendor integrations and APIs
Validates documented legal grounds for each data processing activity
Example Output
Example 1: PII Collection Gap
- ⚠️ FINDING: Uncontrolled PII Collection
Location: /src/signup.js, line 47
Issue: Email collected without explicit opt-in consent checkbox
Severity: HIGH (GDPR Art. 7 violation)
Fix: Add checkbox for marketing consent before form submission
Example 2: Retention Policy Issue
✗ FINDING: Missing Data Retention Policy
Location: user_analytics_pipeline.sql
Issue: No deletion trigger for inactive user records after 36 months
Severity: MEDIUM (CCPA non-compliance)
Fix: Implement automated purge job for records > 3 years old
Recommendation: Document retention rationale in DPA
Example 3: Vendor Risk
- ⚠️ FINDING: Unvetted Third-Party Data Flow
Location: config/integrations.json
Issue: User events sent to analytics vendor without DPA in place
Severity: CRITICAL (GDPR Art. 28 violation)
Fix: Execute Data Processing Agreement before data transfer resumes
What's Included
- SKILL.md: Full compliance checker instruction set with GDPR/CCPA framework
- PII Mapping Template: Spreadsheet to catalog all data flows and processing activities
- Consent Mechanism Checklist: Step-by-step validation framework for consent collection
- Data Retention Policy Worksheet: Table for documenting legal retention periods per data type
- Compliance Audit Report Template: Structured findings format with severity levels and remediation steps
Who It's For
- Compliance Officers — Conducting privacy audits and building compliance frameworks
- Privacy Engineers — Building privacy-by-design into data architectures
- Security Teams — Assessing privacy and data protection risk in code reviews
- General Counsel & Legal — Preparing compliance evidence and DPA documentation
- Product Managers — Vetting new features for privacy violations before launch
Best For
- Privacy compliance audits — Quarterly or bi-annual reviews of code and data flows
- Third-party vendor assessments — Checking integrations before adding analytics, CRM, or payment processors
- New feature launches — Reviewing data collection, consent forms, and preference centers before shipping
- Incident response — Validating deletion request implementations and tracking down orphaned data
- Regulatory preparation — Building evidence packages for GDPR/CCPA assessments and audits
You might also like
Build comprehensive guest profiles that capture preferences, past interactions, and behavioral patterns, then use predictive analysis to anticipate needs before guests express them. Generate personalized communication strategies, service recommendations, and loyalty-building initiatives that create seamless, premium experiences that drive repeat business and justify premium pricing.
by heygen-com
Conduct thorough GDPR/CCPA compliance audits by analyzing your data handling practices, identifying gaps against regulatory requirements, and generating comprehensive risk assessment matrices. You'll receive data flow documentation, control assessments, and actionable remediation recommendations tailored to your organization's specific context. This skill transforms complex privacy regulations into clear, measurable compliance metrics and visual risk profiles.
by skillslib
Orchestrate personalized guest journeys by analyzing preferences, past interactions, and luxury service expectations. This skill helps you craft memorable VIP experiences through intelligent preference mapping, service coordination, and anticipatory hospitality recommendations. You'll deliver white-glove service at scale by automating guest data analysis and generating tailored recommendations that exceed expectations.
by heygen-com
Design culturally authentic tourism products that balance revenue generation with heritage preservation. Get actionable frameworks for community engagement, pricing strategies that reflect genuine value, and sustainable business models that ensure long-term benefits to communities. Create impact measurement systems that demonstrate social and economic value to all stakeholders.
by heygen-com
Design personalized high-end travel experiences complete with curated accommodations, fine dining recommendations, exclusive activities, and seamless logistics. Combine traveler preferences, budget constraints, and seasonal insights to craft unforgettable luxury journeys that handle all coordination details.
by heygen-com
This skill analyzes historical booking patterns, competitor pricing, and market demand to optimize cabin pricing and revenue across cruise itineraries. It forecasts revenue outcomes by simulating different pricing strategies against predicted demand curves, helping you identify optimal booking windows and price points for maximum yield. You'll receive actionable recommendations on price adjustments, capacity management, and promotional timing backed by data-driven analysis.
by heygen-com
This skill analyzes your airline's historical booking data, competitive landscape, and overbooking patterns to generate actionable revenue optimization recommendations. You'll receive seat allocation strategies, dynamic price recommendations, and overbooking risk assessments tailored to your route network and demand forecasts. It combines yield management principles with real-time pricing intelligence to identify revenue uplift opportunities and protect against demand volatility.
by heygen-com
Manage end-to-end corporate travel operations by automating booking coordination, tracking expenses, and enforcing travel policies. Claude handles itinerary planning, expense categorization, policy compliance checks, and generates approval workflows—freeing your team to focus on strategic travel management rather than administrative tasks.
by heygen-com