Installs into .claude/skills of the current project.
Are you the author of Privacy Compliance Review?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/z-zihan-privacy-compliance-review)
---
name: privacy-compliance-review
description: Review local product documentation and code for privacy data flows, controls, evidence gaps, and questions requiring qualified legal review.
---
# Privacy Compliance Review
This is an engineering and evidence review, not legal advice. Jurisdiction, lawful basis, notices, contracts, and regulator interpretation require qualified counsel.
1. Inventory personal-data categories, subjects, sources, purposes, destinations, processors, storage, retention, deletion, and cross-border transfers.
2. Trace actual data flows from collection through logs, analytics, backups, exports, support, and deletion. Do not rely only on policy text.
3. Check minimization, purpose limitation, access control, encryption, consent/choice, user requests, retention enforcement, breach handling, and audit evidence.
4. Separate confirmed implementation facts, missing evidence, legal questions, and recommended engineering changes.
5. Never expose personal data while documenting examples. Use safe schemas and redacted samples.
6. Prioritize high-impact/high-likelihood gaps and identify the owner and verification evidence for remediation.
Return a data-flow inventory, control matrix, findings, evidence gaps, counsel questions, and remediation plan.
