C15t
c15t/c15t
Work with c15t consent management docs, APIs, and integrations for Next.js, React, and JavaScript.
GDPR-compliant Data Processing Agreement drafting per Article 28(3).
Install Dpa Drafting
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills dpa-drafting --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/privacy/dpa-drafting .claude/skills/dpa-drafting && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "dpa-drafting" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-drafting into .claude/skills/dpa-drafting/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dpa-drafting", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-draftingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills dpa-drafting --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/privacy/dpa-drafting .agents/skills/dpa-drafting && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "dpa-drafting" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-drafting into .agents/skills/dpa-drafting/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dpa-drafting", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills dpa-drafting --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/privacy/dpa-drafting .cursor/skills/dpa-drafting && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "dpa-drafting" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-drafting into .cursor/skills/dpa-drafting/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dpa-drafting", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/mukul975/Privacy-Data-Protection-Skills.git --path skills/privacy/dpa-drafting--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills dpa-drafting --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/privacy/dpa-drafting .gemini/skills/dpa-drafting && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "dpa-drafting" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-drafting into .gemini/skills/dpa-drafting/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dpa-drafting", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install mukul975/Privacy-Data-Protection-Skills dpa-draftingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/privacy/dpa-drafting .github/skills/dpa-drafting && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "dpa-drafting" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-drafting into .github/skills/dpa-drafting/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dpa-drafting", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills dpa-drafting --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/privacy/dpa-drafting .opencode/skills/dpa-drafting && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "dpa-drafting" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/dpa-drafting into .opencode/skills/dpa-drafting/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "dpa-drafting", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
dpa-drafting- GitHub stars
- 295
- Token cost
- ~2.8k tokens
- SKILL.md length
- 1,309 words
- Files
- 5 (incl. scripts, references, assets)
- Skills in repo
- 278
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
GDPR-compliant Data Processing Agreement drafting per Article 28(3).
- Works in 5 steps: Right to issue instructions: The… → Right to audit: The controller may audit… → Obligation to determine lawful basis:… → …
- Tasks that involve Privacy and GDPR
- SKILL.md covers Overview, Mandatory DPA Provisions Under…, DPA Drafting Checklist and Key Regulatory References
- Runs Python scripts from its folder
What it does
Dpa Drafting is an agent skill from mukul975/Privacy-Data-Protection-Skills. GDPR-compliant Data Processing Agreement drafting per Article 28(3). Covers all 8 mandatory provisions including subject matter, duration, nature and purpose, data types, categories of data subjects, controller and processor obligations, and sub-processor cascade requirements.
Its SKILL.md is about 2.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files, including scripts, reference files and assets (for example `assets/template.md`, `references/standards.md` and `references/workflows.md`).
It sits in Legal & Compliance, covering Privacy and GDPR. The repository describes itself as: 282+ structured privacy & data protection skills for AI agents. GDPR, CCPA, EU AI Act, HIPAA, LGPD, PIPL, DPDP Act. The licence is Apache-2.0.
When your agent uses it
- Tasks that involve Privacy and GDPR
Example prompts
- “/dpa-drafting”
Requirements
- Python 3
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- Right to issue instructions: The controller has the right to issue documented written instructions regarding processing
- Right to audit: The controller may audit the processor's compliance (Article 28(3)(h))
- Obligation to determine lawful basis: The controller confirms that processing is lawful under Article 6
- Obligation to respond to data subjects: The controller is responsible for responding to data subject requests, with processor assistance
- Obligation to notify processor of relevant changes: Changes to processing instructions, data categories, or regulatory requirements
What it can do on your machine
Read from SKILL.md and the folder at commit 9b2ef9e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Python), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Dpa Drafting loads about 2.8k tokens when it runs, and up to ~5.7k if it reads all its reference files. Until then it costs about 73 tokens; SKILL.md has 1,309 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from mukul975/Privacy-Data-Protection-Skills at commit 9b2ef9e, republished under its Apache-2.0 licence (© mukul975). 1,309 words, ~2,764 tokens.
Download SKILL.mdSave it as
.claude/skills/dpa-drafting/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.- name
- dpa-drafting
- description
- GDPR-compliant Data Processing Agreement drafting per Article 28(3). Covers all 8 mandatory provisions including subject matter, duration, nature and purpose, data types, categories of data subjects, controller and processor obligations, and sub-processor cascade requirements.
- license
- Apache-2.0
- metadata.author
- mukul975
- metadata.version
- 1.0
- metadata.domain
- privacy
- metadata.subdomain
- vendor-privacy-management
- metadata.tags
- dpa-drafting, article-28, data-processing-agreement, processor-contract, gdpr-compliance
Data Processing Agreement Drafting
Overview
GDPR Article 28(3) mandates that processing by a processor shall be governed by a contract or other legal act that is binding on the processor. This contract must set out specific mandatory provisions covering the subject-matter and duration of processing, the nature and purpose, the type of personal data, the categories of data subjects, and the obligations and rights of the controller. The EDPB has emphasized in Guidelines 07/2020 that these requirements are not optional and that failure to include any mandatory element renders the DPA non-compliant.
The European Commission adopted Standard Contractual Clauses for controller-to-processor arrangements in Implementing Decision (EU) 2021/915, providing a reference framework that organizations may adopt or adapt.
Mandatory DPA Provisions Under Article 28(3)
Provision 1: Subject-Matter and Duration
The DPA must specify what processing the vendor will perform and for how long.
Required Elements:
| Element | Description | Example |
|---|---|---|
| Subject-matter | The specific service being provided | "Cloud-hosted customer analytics platform" |
| Duration | Period of processing | "Duration of the Master Services Agreement plus 90-day data return/deletion period" |
| Commencement date | When processing begins | "Effective as of the MSA effective date" |
| Survival clauses | Obligations surviving termination | "Confidentiality, deletion certification, and audit rights survive for 3 years" |
Provision 2: Nature and Purpose of Processing
Required Elements:
| Element | Description | Example |
|---|---|---|
| Nature of processing | Operations performed on personal data | "Collection via API ingestion, storage in encrypted database, automated analysis, aggregated reporting, deletion upon contract termination" |
| Purpose of processing | Why processing occurs | "To provide Summit Cloud Partners with customer behavior analytics enabling product improvement decisions" |
| Processing instructions scope | Boundaries of processing | "Processor shall process personal data only for the purposes specified in Annex 1 and only on documented instructions from the Controller" |
Provision 3: Type of Personal Data
Enumerate all categories of personal data the processor will handle.
Summit Cloud Partners — Example Annex:
| Data Category | Description | Sensitivity Level |
|---|---|---|
| Contact information | Name, email address, phone number | Standard |
| Account identifiers | User ID, account number, tenant ID | Standard |
| Usage data | Feature usage logs, session duration, click paths | Standard |
| Device information | IP address, browser type, OS version | Standard |
| Location data | City/region derived from IP address (not precise GPS) | Elevated |
| Payment metadata | Transaction dates, plan type (not card numbers) | Elevated |
Provision 4: Categories of Data Subjects
| Category | Description | Approximate Volume |
|---|---|---|
| Enterprise customers | Named users of Summit Cloud Partners platform | 50,000 |
| Trial users | Users on free trial accounts | 15,000 |
| API consumers | Developers using Summit Cloud Partners API | 5,000 |
Provision 5: Obligations and Rights of the Controller
The DPA must set out what the controller is entitled to do and what the controller must provide to the processor:
- Right to issue instructions: The controller has the right to issue documented written instructions regarding processing
- Right to audit: The controller may audit the processor's compliance (Article 28(3)(h))
- Obligation to determine lawful basis: The controller confirms that processing is lawful under Article 6
- Obligation to respond to data subjects: The controller is responsible for responding to data subject requests, with processor assistance
- Obligation to notify processor of relevant changes: Changes to processing instructions, data categories, or regulatory requirements
Provision 6: Processor Obligations (Article 28(3)(a)-(h))
The eight mandatory processor obligations under Article 28(3):
(a) Process only on documented instructions
"The Processor shall process personal data only on documented instructions from the Controller, including with regard to transfers of personal data to a third country or an international organisation, unless required to do so by Union or Member State law to which the Processor is subject; in such a case, the Processor shall inform the Controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest."
(b) Confidentiality obligations
"The Processor shall ensure that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality."
(c) Security measures (Article 32)
"The Processor shall implement all measures required pursuant to Article 32, including as appropriate: (i) pseudonymisation and encryption of personal data; (ii) the ability to ensure ongoing confidentiality, integrity, availability and resilience of processing systems; (iii) the ability to restore availability and access to personal data in a timely manner in the event of a physical or technical incident; (iv) a process for regularly testing, assessing, and evaluating the effectiveness of technical and organisational measures."
(d) Sub-processor conditions
"The Processor shall not engage another processor without prior specific or general written authorisation of the Controller. In the case of general written authorisation, the Processor shall inform the Controller of any intended changes concerning the addition or replacement of other processors, thereby giving the Controller the opportunity to object to such changes."
(e) Assist with data subject rights
"Taking into account the nature of the processing, the Processor shall assist the Controller by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the Controller's obligation to respond to requests for exercising the data subject's rights laid down in Chapter III."
(f) Assist with compliance obligations
"The Processor shall assist the Controller in ensuring compliance with Articles 32 to 36, taking into account the nature of processing and the information available to the Processor."
(g) Deletion or return after termination
"At the choice of the Controller, the Processor shall delete or return all personal data to the Controller after the end of the provision of services relating to processing, and delete existing copies unless Union or Member State law requires storage of the personal data."
(h) Audit rights
"The Processor shall make available to the Controller all information necessary to demonstrate compliance with the obligations laid down in Article 28, and allow for and contribute to audits, including inspections, conducted by the Controller or another auditor mandated by the Controller."
Show full SKILL.md (355 more words)Show less
Provision 7: Sub-Processor Cascade
When the processor engages sub-processors, Article 28(4) requires the same data protection obligations as in the controller-processor DPA to be imposed on the sub-processor by way of a contract. The sub-processor DPA must contain materially equivalent terms.
Sub-processor management provisions:
| Provision | Description |
|---|---|
| Authorization mechanism | General written authorization with notification of changes |
| Notification period | Minimum 30 calendar days before engaging new sub-processor |
| Objection right | Controller may object within the notification period |
| Objection consequence | If objection not resolved, either party may terminate affected services |
| Flow-down obligations | Sub-processor contract must impose equivalent Article 28(3) obligations |
| Liability | Processor remains fully liable for sub-processor compliance |
Provision 8: International Transfers
If personal data will be transferred outside the EEA, the DPA must address the transfer mechanism:
| Transfer Scenario | Required Mechanism |
|---|---|
| EEA to Adequacy country (per Art. 45) | Reference adequacy decision |
| EEA to non-adequate country | Standard Contractual Clauses (Commission Decision 2021/914) |
| EEA to non-adequate country with supplementary measures | SCCs plus technical/organizational/contractual supplementary measures per EDPB Recommendations 01/2020 |
DPA Drafting Checklist
| # | Requirement | Article | Status |
|---|---|---|---|
| 1 | Subject-matter and duration specified | 28(3) | [ ] |
| 2 | Nature and purpose of processing defined | 28(3) | [ ] |
| 3 | Types of personal data listed | 28(3) | [ ] |
| 4 | Categories of data subjects listed | 28(3) | [ ] |
| 5 | Controller obligations and rights defined | 28(3) | [ ] |
| 6 | Processor processes only on documented instructions | 28(3)(a) | [ ] |
| 7 | Confidentiality obligations for authorized personnel | 28(3)(b) | [ ] |
| 8 | Article 32 security measures implemented | 28(3)(c) | [ ] |
| 9 | Sub-processor conditions and authorization | 28(3)(d) | [ ] |
| 10 | Assistance with data subject rights | 28(3)(e) | [ ] |
| 11 | Assistance with Articles 32-36 compliance | 28(3)(f) | [ ] |
| 12 | Deletion or return upon termination | 28(3)(g) | [ ] |
| 13 | Audit rights and information access | 28(3)(h) | [ ] |
| 14 | Sub-processor flow-down obligations per Art. 28(4) | 28(4) | [ ] |
| 15 | International transfer mechanism (if applicable) | 28(3), Ch. V | [ ] |
| 16 | Breach notification obligations per Art. 33(2) | 33(2) | [ ] |
| 17 | DPA is in writing (including electronic form) | 28(9) | [ ] |
Key Regulatory References
- GDPR Article 28(3) — Mandatory DPA provisions
- GDPR Article 28(4) — Sub-processor flow-down obligations
- GDPR Article 28(9) — Written form requirement
- GDPR Article 32 — Security of processing
- GDPR Article 33(2) — Processor breach notification to controller
- Commission Implementing Decision (EU) 2021/915 — Standard Contractual Clauses for controller-to-processor
- EDPB Guidelines 07/2020 — Controller and processor concepts
- EDPB Recommendations 01/2020 — Supplementary measures for international transfers
© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 4 other files (scripts, references, assets) in skills/privacy/dpa-drafting of mukul975/Privacy-Data-Protection-Skills.
- SKILL.md
- assets/template.md
- references/standards.md
- references/workflows.md
- scripts/process.py
Open the folder on GitHubat commit 9b2ef9e
Compare with similar skills
Dpa Drafting next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Dpa Drafting this skillmukul975/Privacy-Data-Protection-Skills | 295 | — | ~2.8k | Automated safety check: Pass | Apache-2.0 | |
| C15tc15t/c15t | 1.9k | 1 repos | ~1.6k | Automated safety check: Pass | Apache-2.0 | |
| HIPAA Safe Harbor Coverage Auditmaziyarpanahi/openmed | 5.5k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | |
| Korean Privacy Termskimlawtech/korean-privacy-terms | 586 | — | ~2.9k | Automated safety check: Pass | Apache-2.0 | |
| Gdpr ComplianceSushegaad/Claude-Skills-Governance-Risk-and-Compliance | 942 | 1 repos | ~3.9k | Automated safety check: Pass | MIT | |
| Hipaa ComplianceSushegaad/Claude-Skills-Governance-Risk-and-Compliance | 942 | 1 repos | ~2.3k | Automated safety check: Pass | MIT |
Similar skills
HIPAA Safe Harbor Coverage Audit
maziyarpanahi/openmed
Checks OpenMed de-identified clinical text against the 18 HIPAA Safe Harbor identifier categories and reports gaps and residual re-identification risk.
Korean Privacy Terms
kimlawtech/korean-privacy-terms
처리방침·이용약관 자동 생성 스킬 패키지 (v4.0). An agent skill from kimlawtech/korean-privacy-terms.
Gdpr Compliance
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing…
Hipaa Compliance
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert HIPAA compliance assistant for healthcare and software contexts.
Pii Contract Analyze
gregmos/PII-Shield
Universal legal document processor with PII anonymization. An agent skill from gregmos/PII-Shield.
More from mukul975/Privacy-Data-Protection-Skills
All 278 skills in this repoAge Gating Services
mukul975/Privacy-Data-Protection-Skills
Implements age-gating mechanisms for online services to restrict access based on user age.
AI Data Retention
mukul975/Privacy-Data-Protection-Skills
Manages AI model retention and machine unlearning requirements.
Dpia Mitigation Plan
mukul975/Privacy-Data-Protection-Skills
Structures risk mitigation planning and residual risk tracking for Data Protection Impact Assessments under GDPR Article 35(7)(d).
Gdpr Accountability
mukul975/Privacy-Data-Protection-Skills
Guides implementation of the GDPR accountability principle under Articles 5(2) and 24, including documentation requirements for policies, DPIAs, RoPA, training records, and breach logs.
Pia Threshold Screening
mukul975/Privacy-Data-Protection-Skills
Conducts pre-DPIA threshold screening to determine whether a full Data Protection Impact Assessment is required under GDPR Article 35.
Retention Schedule
mukul975/Privacy-Data-Protection-Skills
Designs and implements data retention schedules compliant with GDPR Article 5(1)(e) storage limitation principle.
Related
Categories
Questions about Dpa Drafting
What does Dpa Drafting do?
GDPR-compliant Data Processing Agreement drafting per Article 28(3). Dpa Drafting is an agent skill from mukul975/Privacy-Data-Protection-Skills. GDPR-compliant Data Processing Agreement drafting per Article 28(3).
When should I use Dpa Drafting?
Dpa Drafting fits situations like: tasks that involve Privacy and GDPR.
How do I install Dpa Drafting in Claude Code?
Run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a claude-code`. Or copy the skill folder (skills/privacy/dpa-drafting in mukul975/Privacy-Data-Protection-Skills) into .claude/skills/dpa-drafting in your project. Claude Code loads it when a task matches its description.
How do I install Dpa Drafting in Codex?
Run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a codex`. Or copy the skill folder (skills/privacy/dpa-drafting in mukul975/Privacy-Data-Protection-Skills) into .agents/skills/dpa-drafting in your project. Codex loads it when a task matches its description.
Can I use Dpa Drafting in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill dpa-drafting -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/dpa-drafting, .gemini/skills/dpa-drafting, .github/skills/dpa-drafting and .opencode/skills/dpa-drafting in your project.
What does Dpa Drafting need to run?
Going by SKILL.md and its folder, Dpa Drafting needs Python for the scripts in its folder. Our summary lists: Python 3.
Does Dpa Drafting access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Dpa Drafting safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Dpa Drafting use?
Dpa Drafting is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Dpa Drafting use?
About 2.8k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 2.9k tokens, read only when the agent opens those files.
What are the alternatives to Dpa Drafting?
Skills that share tags, products or a category with Dpa Drafting: C15t (c15t/c15t, 1.9k stars), HIPAA Safe Harbor Coverage Audit (maziyarpanahi/openmed, 5.5k stars), Korean Privacy Terms (kimlawtech/korean-privacy-terms, 586 stars) and Gdpr Compliance (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 942 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Dpa Drafting?
mukul975 (a GitHub user) maintains it in mukul975/Privacy-Data-Protection-Skills, which has 295 GitHub stars. The repository holds 278 skills in this directory. The repository was last updated on March 16, 2026.
Source: mukul975/Privacy-Data-Protection-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.