⚖️ Legal & Compliance · Privacy & Data Protection

Map personal data flows for GDPR readiness

Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.

intermediate~45 minLegal OpsPrivacy OfficersCompliance Teams

Steps

1Inventory systems holding personal data with owners per store
2Classify data categories: identity, behavioral, special categories
3Document lawful basis per processing purpose; no 'legitimate interest' dumping
4Map cross-border transfers with safeguard mechanisms noted
5Record retention periods and deletion mechanics per category
6Review the map quarterly and at every new integration

Common Pitfalls

▲Shadow SaaS tools missing from the map entirely
▲Retention 'indefinite' defaults in databases

Success Signals

✓100% systems mapped with owners
✓Zero unmapped processors

Commands

Install with skills CLI

$ npx skills add aniruddhaadak80/skills --skill privacy-data-data-mapping-gdpr

Install globally

$ npx skills add aniruddhaadak80/skills --skill privacy-data-data-mapping-gdpr -g

Tags

#gdpr#privacy#data-mapping#legal-compliance#privacy-data

Install this skill

$ npx skills add aniruddhaadak80/skills --skill privacy-data-data-mapping-gdpr -a opencode

SKILL.md

# Map personal data flows for GDPR readiness

> Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.

## When to Use This Skill

Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.

## Steps

1. Inventory systems holding personal data with owners per store
2. Classify data categories: identity, behavioral, special categories
3. Document lawful basis per processing purpose; no 'legitimate interest' dumping
4. Map cross-border transfers with safeguard mechanisms noted
5. Record retention periods and deletion mechanics per category
6. Review the map quarterly and at every new integration

## Common Pitfalls

- Shadow SaaS tools missing from the map entirely
- Retention 'indefinite' defaults in databases

View source on GitHub ↗

Intake, verification, retrieval, and response workflow meeting statutory clocks without panic.

⚖️ Legal & Compliance·~35m

Open →

Run privacy reviews inside feature developmentadvanced

Shift privacy questions into design docs so answers shape architecture, not patches.

⚖️ Legal & Compliance·~30m