GDPR Compliance Check Workflow Skill

A structured self-assessment with an Article reference against every finding.

Claude resolves controller versus processor before anything else, because the rest of the analysis is wrong if that is wrong. It then works ten areas in order: lawful basis per purpose (not one basis for the whole activity), the Article 9 condition where special category data is present, transparency, minimisation, retention, data subject rights, processor contracts, transfers, the DPIA trigger and security.

It never says compliant about a whole activity. It says which specific requirement is met on the facts given, and marks UNSTATED where a fact is missing, because half the findings in a real assessment turn on something nobody wrote down.

Not legal advice. The skill says so itself, every time.

What you get: one .md file, ready in minutes. Works in Claude, Claude Code, Cowork, ChatGPT and Gemini.