C15t
c15t/c15t
Work with c15t consent management docs, APIs, and integrations for Next.js, React, and JavaScript.
Guides assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers.
Install Eu Us Dpf Assessment
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills eu-us-dpf-assessment --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/privacy/eu-us-dpf-assessment .claude/skills/eu-us-dpf-assessment && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "eu-us-dpf-assessment" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessment into .claude/skills/eu-us-dpf-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "eu-us-dpf-assessment", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessmentType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills eu-us-dpf-assessment --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/privacy/eu-us-dpf-assessment .agents/skills/eu-us-dpf-assessment && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "eu-us-dpf-assessment" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessment into .agents/skills/eu-us-dpf-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "eu-us-dpf-assessment", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills eu-us-dpf-assessment --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/privacy/eu-us-dpf-assessment .cursor/skills/eu-us-dpf-assessment && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "eu-us-dpf-assessment" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessment into .cursor/skills/eu-us-dpf-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "eu-us-dpf-assessment", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/mukul975/Privacy-Data-Protection-Skills.git --path skills/privacy/eu-us-dpf-assessment--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills eu-us-dpf-assessment --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/privacy/eu-us-dpf-assessment .gemini/skills/eu-us-dpf-assessment && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "eu-us-dpf-assessment" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessment into .gemini/skills/eu-us-dpf-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "eu-us-dpf-assessment", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install mukul975/Privacy-Data-Protection-Skills eu-us-dpf-assessmentInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/privacy/eu-us-dpf-assessment .github/skills/eu-us-dpf-assessment && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "eu-us-dpf-assessment" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessment into .github/skills/eu-us-dpf-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "eu-us-dpf-assessment", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install mukul975/Privacy-Data-Protection-Skills eu-us-dpf-assessment --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/mukul975/Privacy-Data-Protection-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/privacy/eu-us-dpf-assessment .opencode/skills/eu-us-dpf-assessment && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "eu-us-dpf-assessment" agent skill from https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/eu-us-dpf-assessment into .opencode/skills/eu-us-dpf-assessment/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "eu-us-dpf-assessment", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
eu-us-dpf-assessment- GitHub stars
- 301
- Token cost
- ~3.1k tokens
- SKILL.md length
- 1,599 words
- Files
- 5 (incl. scripts, references, assets)
- Skills in repo
- 280
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Guides assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers.
- Works in 7 steps: Notice Principle → Choice Principle → Accountability for Onward Transfer… → …
- Tasks that involve Privacy and GDPR
- SKILL.md covers Overview, DPF Adequacy Decision — Key…, Self-Certification Process and DPF Principles, plus 4 more sections
- Runs Python scripts from its folder
What it does
Eu Us Dpf Assessment is an agent skill from mukul975/Privacy-Data-Protection-Skills. Guides assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers. Covers DPF self-certification with the Department of Commerce, DPF principles compliance, Data Protection Review Court, and annual EC review. Keywords: DPF, EU-US, adequacy, Privacy Shield, transatlantic transfers.
Its SKILL.md is about 3.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files, including scripts, reference files and assets (for example `assets/template.md`, `references/standards.md` and `references/workflows.md`).
It sits in Legal & Compliance, covering Privacy and GDPR. The repository describes itself as: 282+ structured privacy & data protection skills for AI agents. GDPR, CCPA, EU AI Act, HIPAA, LGPD, PIPL, DPDP Act. The licence is Apache-2.0.
When your agent uses it
- Tasks that involve Privacy and GDPR
Example prompts
- “Use the eu-us-dpf-assessment skill to guide assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers”
- “/eu-us-dpf-assessment”
Requirements
- Python 3
Workflow steps
7 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 9b2ef9e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/ (Python), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Eu Us Dpf Assessment loads about 3.1k tokens when it runs, and up to ~5.9k if it reads all its reference files. Until then it costs about 87 tokens; SKILL.md has 1,599 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from mukul975/Privacy-Data-Protection-Skills at commit 9b2ef9e, republished under its Apache-2.0 licence (© mukul975). 1,599 words, ~3,054 tokens.
Download SKILL.mdSave it as
.claude/skills/eu-us-dpf-assessment/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.- name
- eu-us-dpf-assessment
- description
- Guides assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers. Covers DPF self-certification with the Department of Commerce, DPF principles compliance, Data Protection Review Court, and annual EC review. Keywords: DPF, EU-US, adequacy, Privacy Shield, transatlantic transfers.
- license
- Apache-2.0
- metadata.author
- mukul975
- metadata.version
- 1.0
- metadata.domain
- privacy
- metadata.subdomain
- cross-border-transfers
- metadata.tags
- dpf, eu-us-data-privacy-framework, adequacy-decision, transatlantic-transfers, self-certification
Assessing the EU-US Data Privacy Framework
Overview
The European Commission adopted the adequacy decision for the EU-US Data Privacy Framework (DPF) on 10 July 2023, based on Commission Implementing Decision (EU) 2023/1795. This adequacy decision enables transfers of personal data from the EU/EEA to US organisations that have self-certified to the DPF with the US Department of Commerce (DoC), without the need for additional transfer mechanisms such as SCCs or BCRs. The DPF replaced the invalidated Privacy Shield framework and was designed to address the concerns raised by the Court of Justice in Schrems II (Case C-311/18) through the introduction of Executive Order 14086 limiting US signals intelligence activities.
DPF Adequacy Decision — Key Elements
Legal Basis
- Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 pursuant to GDPR Art. 45(3)
- US Executive Order 14086 (7 October 2022) — Enhancing Safeguards for United States Signals Intelligence Activities
- Attorney General Regulation (29 June 2023) establishing the Data Protection Review Court (DPRC)
- UK Extension: The UK-US Data Bridge (effective 12 October 2023) extends DPF protections for UK-to-US transfers
Scope of Adequacy
The DPF adequacy decision applies only to transfers to US organisations that:
- Have actively self-certified to the DPF with the Department of Commerce
- Are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) or the Department of Transportation (DoT)
- Are listed on the DPF List maintained by the DoC at dataprivacyframework.gov
The adequacy decision does not cover transfers to:
- US government agencies
- US organisations that have not self-certified
- US organisations subject to regulators other than the FTC or DoT (e.g., banks regulated by the OCC, telecommunications carriers regulated by the FCC)
Self-Certification Process
Eligibility Requirements
- The organisation must be subject to the jurisdiction of the FTC (under Section 5 of the FTC Act) or the DoT (under 49 USC).
- The organisation must commit to comply with all DPF Principles.
- The organisation must publicly disclose its DPF-compliant privacy policy.
- The organisation must identify an independent recourse mechanism for handling complaints.
- The organisation must pay the annual certification fee to the DoC.
Certification Steps
| Step | Action | Timeline |
|---|---|---|
| 1 | Review DPF Principles and assess organisational readiness | 2-4 weeks |
| 2 | Develop or update privacy policy to comply with DPF Principles | 2-3 weeks |
| 3 | Select and engage an independent recourse mechanism (IRM) | 1-2 weeks |
| 4 | Designate a contact person responsible for DPF compliance | 1 week |
| 5 | Complete the self-certification application at dataprivacyframework.gov | 1 week |
| 6 | Submit required documentation and privacy policy URL | 1 week |
| 7 | Pay annual certification fee (scaled by revenue) | Upon submission |
| 8 | DoC review and listing on the DPF List | 2-4 weeks after submission |
| 9 | Annual re-certification before expiry date | 12 months after initial certification |
Annual Certification Fee Schedule (2025)
| Organisation Annual Revenue | Fee |
|---|---|
| Up to USD 5 million | USD 0 (fee waived for small organisations) |
| USD 5 million — USD 25 million | USD 575 |
| USD 25 million — USD 500 million | USD 1,150 |
| USD 500 million — USD 5 billion | USD 2,300 |
| Over USD 5 billion | USD 3,450 |
DPF Principles
1. Notice Principle
Self-certified organisations must inform individuals about:
- The types of personal data collected
- The purposes of processing
- The right to access and correct data
- The type or identity of third parties to whom data may be disclosed
- The choices and means offered for limiting use and disclosure
- The independent recourse mechanism available
- The organisation's liability in cases of onward transfer to third parties
2. Choice Principle
Organisations must offer individuals the opportunity to opt out when personal data is:
- Disclosed to a third party (other than an agent acting on the organisation's behalf)
- Used for a purpose materially different from the purpose for which it was originally collected or subsequently authorised
For sensitive data (health, racial/ethnic origin, political opinions, religious beliefs, trade union membership, sex life, criminal record), affirmative express consent (opt-in) is required before disclosure or use for a new purpose.
3. Accountability for Onward Transfer Principle
Transfers to third-party controllers require:
- A contract stipulating the third party provides the same level of protection as the DPF Principles
- The third party notifies the organisation if it can no longer meet this obligation
Transfers to agents (processors) require:
- A contract restricting processing to specified purposes
- The agent provides the same level of protection
- The agent notifies the organisation and takes reasonable steps to stop and remediate unauthorised processing
4. Security Principle
Organisations must take reasonable and appropriate measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of the data.
5. Data Integrity and Purpose Limitation Principle
Personal data must be:
- Relevant for the purposes of processing
- Reliable for its intended use
- Accurate, complete, and current
- Not processed in a way incompatible with the purposes for which it was collected or subsequently authorised
6. Access Principle
Individuals have the right to:
- Obtain confirmation of whether the organisation processes their data
- Have the data communicated to them within a reasonable time
- Challenge the accuracy of the data and have it corrected, amended, or deleted
Access may be restricted only in limited circumstances (e.g., where providing access would violate others' rights, where the burden or expense of providing access is disproportionate, or where disclosure would violate legal obligations).
7. Recourse, Enforcement, and Liability Principle
Organisations must provide:
- An accessible, independent, and affordable dispute resolution mechanism
- Procedures for verifying compliance with the DPF commitments
- Remediation of problems arising from non-compliance
- Consequences for the organisation if it fails to comply (sanctions by the FTC/DoT)
Data Protection Review Court (DPRC)
Show full SKILL.md (672 more words)Show less
Structure
- The DPRC was established by the Attorney General Regulation of 29 June 2023 pursuant to Executive Order 14086.
- The DPRC is a two-tier review mechanism:
- First tier: Civil Liberties Protection Officer (CLPO) at the Office of the Director of National Intelligence (ODNI) reviews complaints and issues binding determinations
- Second tier: Data Protection Review Court reviews CLPO determinations upon application by the complainant or the intelligence community element
Process for EU Data Subjects
- Data subjects submit complaints to their national data protection authority (SA).
- The SA transmits the complaint to the EDPB Secretariat.
- The EDPB Secretariat forwards the complaint to the US via the designated channel.
- The CLPO investigates and determines whether a covered violation occurred.
- If a violation is found, the CLPO directs appropriate remediation.
- The complainant or the intelligence community element may apply for DPRC review.
- The DPRC appoints a special advocate to represent the complainant's interests.
- The DPRC issues a final, binding determination.
- The outcome is communicated back through the same channel to the SA and the data subject.
Key Safeguards in Executive Order 14086
| Safeguard | Description |
|---|---|
| Necessity standard | US signals intelligence collection must be necessary to advance a validated intelligence priority |
| Proportionality standard | Collection must be proportionate, balancing intelligence need against privacy impact |
| Prohibited purposes | Collection may not be conducted for suppressing dissent, disadvantaging persons based on ethnicity/race/religion, restricting freedom of the press, or gaining commercial competitive advantage |
| Bulk collection limits | Bulk collection permitted only for specific, enumerated objectives (e.g., counter-espionage, counter-terrorism); must be as tailored as feasible |
| Data retention limits | Personal data collected through signals intelligence must be deleted when no longer needed for the validated intelligence purpose |
| Binding nature | EO 14086 creates binding obligations enforceable through the DPRC |
Annual European Commission Review
The adequacy decision requires periodic review by the European Commission in cooperation with the EDPB and the European Parliament:
- First review: Conducted in 2024, published October 2024 — Commission concluded the DPF continues to ensure an adequate level of protection
- Subsequent reviews: At least every four years
- Review elements: Compliance enforcement by the FTC/DoT, DPRC functioning, implementation of EO 14086, developments in US surveillance law, FISA Section 702 reauthorization status
- Power to suspend or repeal: The Commission may suspend or repeal the adequacy decision if the level of protection is no longer adequate
Verification Checklist for EU Data Exporters
Before relying on the DPF for a transfer, the EU data exporter must verify:
| Check | Method |
|---|---|
| Importer is listed on the DPF List | Search dataprivacyframework.gov |
| Certification is active (not expired or withdrawn) | Check status and expiry date on the DPF List |
| Certification covers the relevant data categories | Review the organisation's DPF scope on the List (HR data, non-HR data, or both) |
| Importer is subject to FTC or DoT jurisdiction | Confirm regulatory jurisdiction in the DPF listing |
| Importer's privacy policy references DPF compliance | Review the published privacy policy at the URL listed |
| IRM identified | Confirm the independent recourse mechanism listed on the DPF entry |
| Data transfer falls within the scope of the adequacy decision | Confirm the transfer is to a self-certified organisation and not to a non-certified entity |
Risk Considerations and Ongoing Monitoring
Legal Stability Risks
- FISA Section 702: Reauthorised through April 2026; future legislative changes could affect the DPF adequacy assessment
- Judicial challenges: Privacy advocacy groups (notably noyb) have indicated the possibility of challenging the DPF before the CJEU, similar to the Schrems I and Schrems II proceedings
- Political risk: A change in US administration could affect the continued implementation of EO 14086
Mitigation Strategies
- Dual mechanism approach: Maintain executed SCCs as a backup mechanism for US transfers alongside DPF reliance, enabling rapid switching if the adequacy decision is suspended or invalidated.
- Monitoring programme: Track EC review outcomes, CJEU case filings, and US legislative developments.
- Contractual safeguards: Include DPF-specific termination and data return clauses in contracts with US importers, triggered by adequacy decision invalidation.
- Transfer register documentation: Record DPF as the transfer mechanism with the importer's DPF List entry date and re-certification schedule.
© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 4 other files (scripts, references, assets) in skills/privacy/eu-us-dpf-assessment of mukul975/Privacy-Data-Protection-Skills.
- SKILL.md
- assets/template.md
- references/standards.md
- references/workflows.md
- scripts/process.py
Open the folder on GitHubat commit 9b2ef9e
Compare with similar skills
Eu Us Dpf Assessment next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Eu Us Dpf Assessment this skillmukul975/Privacy-Data-Protection-Skills | 301 | — | ~3.1k | Automated safety check: Pass | Apache-2.0 | |
| C15tc15t/c15t | 1.9k | 1 repos | ~1.6k | Automated safety check: Pass | Apache-2.0 | |
| HIPAA Safe Harbor Coverage Auditmaziyarpanahi/openmed | 5.5k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | |
| Korean Privacy Termskimlawtech/korean-privacy-terms | 587 | — | ~2.9k | Automated safety check: Pass | Apache-2.0 | |
| Gdpr ComplianceSushegaad/Claude-Skills-Governance-Risk-and-Compliance | 946 | 1 repos | ~3.9k | Automated safety check: Pass | MIT | |
| Hipaa ComplianceSushegaad/Claude-Skills-Governance-Risk-and-Compliance | 946 | 1 repos | ~2.3k | Automated safety check: Pass | MIT |
Similar skills
HIPAA Safe Harbor Coverage Audit
maziyarpanahi/openmed
Checks OpenMed de-identified clinical text against the 18 HIPAA Safe Harbor identifier categories and reports gaps and residual re-identification risk.
Korean Privacy Terms
kimlawtech/korean-privacy-terms
처리방침·이용약관 자동 생성 스킬 패키지 (v4.0). An agent skill from kimlawtech/korean-privacy-terms.
Gdpr Compliance
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing…
Hipaa Compliance
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert HIPAA compliance assistant for healthcare and software contexts.
Pii Contract Analyze
gregmos/PII-Shield
Universal legal document processor with PII anonymization. An agent skill from gregmos/PII-Shield.
More from mukul975/Privacy-Data-Protection-Skills
All 280 skills in this repoAge Gating Services
mukul975/Privacy-Data-Protection-Skills
Implements age-gating mechanisms for online services to restrict access based on user age.
AI Data Retention
mukul975/Privacy-Data-Protection-Skills
Manages AI model retention and machine unlearning requirements.
AI Dpia
mukul975/Privacy-Data-Protection-Skills
Conducts Data Protection Impact Assessments for AI and ML systems per EDPB Guidelines 04/2025 on AI processing.
Dpia Mitigation Plan
mukul975/Privacy-Data-Protection-Skills
Structures risk mitigation planning and residual risk tracking for Data Protection Impact Assessments under GDPR Article 35(7)(d).
Gdpr Accountability
mukul975/Privacy-Data-Protection-Skills
Guides implementation of the GDPR accountability principle under Articles 5(2) and 24, including documentation requirements for policies, DPIAs, RoPA, training records, and breach logs.
Pia Threshold Screening
mukul975/Privacy-Data-Protection-Skills
Conducts pre-DPIA threshold screening to determine whether a full Data Protection Impact Assessment is required under GDPR Article 35.
Related
Categories
Questions about Eu Us Dpf Assessment
What does Eu Us Dpf Assessment do?
Guides assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers. Eu Us Dpf Assessment is an agent skill from mukul975/Privacy-Data-Protection-Skills. Guides assessment and use of the EU-US Data Privacy Framework adequacy decision for transatlantic data transfers.
When should I use Eu Us Dpf Assessment?
Eu Us Dpf Assessment fits situations like: tasks that involve Privacy and GDPR.
How do I install Eu Us Dpf Assessment in Claude Code?
Run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a claude-code`. Or copy the skill folder (skills/privacy/eu-us-dpf-assessment in mukul975/Privacy-Data-Protection-Skills) into .claude/skills/eu-us-dpf-assessment in your project. Claude Code loads it when a task matches its description.
How do I install Eu Us Dpf Assessment in Codex?
Run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a codex`. Or copy the skill folder (skills/privacy/eu-us-dpf-assessment in mukul975/Privacy-Data-Protection-Skills) into .agents/skills/eu-us-dpf-assessment in your project. Codex loads it when a task matches its description.
Can I use Eu Us Dpf Assessment in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Privacy-Data-Protection-Skills --skill eu-us-dpf-assessment -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/eu-us-dpf-assessment, .gemini/skills/eu-us-dpf-assessment, .github/skills/eu-us-dpf-assessment and .opencode/skills/eu-us-dpf-assessment in your project.
What does Eu Us Dpf Assessment need to run?
Going by SKILL.md and its folder, Eu Us Dpf Assessment needs Python for the scripts in its folder. Our summary lists: Python 3.
Does Eu Us Dpf Assessment access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Eu Us Dpf Assessment safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Eu Us Dpf Assessment use?
Eu Us Dpf Assessment is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Eu Us Dpf Assessment use?
About 3.1k tokens (SKILL.md is roughly 12k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 2.8k tokens, read only when the agent opens those files.
What are the alternatives to Eu Us Dpf Assessment?
Skills that share tags, products or a category with Eu Us Dpf Assessment: C15t (c15t/c15t, 1.9k stars), HIPAA Safe Harbor Coverage Audit (maziyarpanahi/openmed, 5.5k stars), Korean Privacy Terms (kimlawtech/korean-privacy-terms, 587 stars) and Gdpr Compliance (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 946 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Eu Us Dpf Assessment?
mukul975 (a GitHub user) maintains it in mukul975/Privacy-Data-Protection-Skills, which has 301 GitHub stars. The repository holds 280 skills in this directory. The repository was last updated on March 16, 2026.
Source: mukul975/Privacy-Data-Protection-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.