⚖️ Legal & Compliance · Privacy & Data Protection

Run privacy reviews inside feature development

Shift privacy questions into design docs so answers shape architecture, not patches.

advanced~30 minLegal OpsPrivacy OfficersCompliance Teams

Steps

1Add privacy section to PRD template: data collected, purpose, retention
2Trigger full assessment when new data categories or sharing emerge
3Prefer client-side computation when feasible over collecting raw data
4Minimize: collect only fields a defined purpose consumes
5Wire consent flags into actual code paths, not just UI copy
6Re-assess when vendors change subprocessor chains

Common Pitfalls

▲Consent banners lying about actual SDK behavior
▲Analytics collecting more than documented

Commands

Install with skills CLI

$ npx skills add aniruddhaadak80/skills --skill privacy-data-privacy-by-design-review

Install globally

$ npx skills add aniruddhaadak80/skills --skill privacy-data-privacy-by-design-review -g

Tags

#privacy-by-design#dpiat#product#legal-compliance#privacy-data

Install this skill

$ npx skills add aniruddhaadak80/skills --skill privacy-data-privacy-by-design-review -a opencode

SKILL.md

# Run privacy reviews inside feature development

> Shift privacy questions into design docs so answers shape architecture, not patches.

## When to Use This Skill

Shift privacy questions into design docs so answers shape architecture, not patches.

## Steps

1. Add privacy section to PRD template: data collected, purpose, retention
2. Trigger full assessment when new data categories or sharing emerge
3. Prefer client-side computation when feasible over collecting raw data
4. Minimize: collect only fields a defined purpose consumes
5. Wire consent flags into actual code paths, not just UI copy
6. Re-assess when vendors change subprocessor chains

## Common Pitfalls

- Consent banners lying about actual SDK behavior
- Analytics collecting more than documented

View source on GitHub ↗

Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.

⚖️ Legal & Compliance·~45m

Open →

Answer data subject requests within deadlinesintermediate

Intake, verification, retrieval, and response workflow meeting statutory clocks without panic.

⚖️ Legal & Compliance·~35m