Description
gdpr-compliant is an agent skill from the github/awesome-copilot collection that brings GDPR-compliant engineering practices into the codebase. It is a reference for engineers, architects, DevOps staff and tech leads, based on the principles in Article 5 of the regulation and on guidance from the French data protection authority CNIL, with related articles on design, security, breach notification and impact assessment. Its golden rule is to collect less, store less, expose less and retain less. The skill is used when designing APIs, writing data models, building authentication, and making any decision about what personal data a system handles. It points to three deeper references: one on user rights endpoints, the data subject request workflow and the record of processing activities; one on security, covering encryption, hashing, secrets and anonymization; and one on operations, covering cloud, CI/CD, incident response and architecture patterns. It is useful for developers who need practical rules at the point they write code. Engineering practices support compliance but do not establish it on their own, so an organization's privacy and legal teams should decide what the law requires for its data, and this guidance should be checked against that advice. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 1.6K installs and passing results from three security audits at the time of the scan.…
Highlights
- Engineering practices based on GDPR Article 5
- Golden rule: collect less, store less, expose less, retain less
- Guidance for APIs, data models and authentication
- Deeper references on rights, security and operations
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate gdpr-compliant.
People also visit
intent-driven-development
Turn ambiguous or high-impact product and engineering changes into scoped
gdpr-compliant FAQ
What is the golden rule?
Collect less, store less, expose less and retain less.
What does the skill cover?
Core GDPR principles, user rights endpoints, security practices such as encryption and hashing, and operational topics such as incident response.
Is it legal advice?
No. Engineering practice supports compliance, but privacy and legal teams should decide what the law requires for your data.
How do I install it?
Run npx skills add https://github.com/github/awesome-copilot --skill gdpr-compliant.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best gdpr-compliant alternatives?
Popular alternatives to gdpr-compliant include gdpr-data-handling, healthcare-phi-compliance and file-conversion. See all gdpr-compliant alternatives