Workflow

Run a Maestro-style regulatory compliance review for GDPR/CCPA, cookie consent, data handling, and licensing

Read ../../references/runtime-guide.md. Call get_skill_content with resources: ["architecture", "delegation"]. Call get_agent with agents: ["compliance-reviewer"].

Workflow

  1. Identify applicable regulations and define audit scope
  2. Review data handling patterns, user disclosures, consent flows, retention policies, and third-party integrations
  3. Audit regulatory compliance: GDPR/CCPA, cookie consent, data residency, licensing, and open-source obligations
  4. Present findings with regulatory reference, severity, compliance risk, and recommended actions
  5. Distinguish legal-risk observations from code-level bugs

Added: September 23, 2026 · Last updated: September 24, 2026

View on GitHubDownload

Files (1)

Jurisdiction
Cross-jurisdiction
Practice area
Data protection
License
Apache-2.0
Author
josstei
Source
cross-jurisdiction/data-protection/skills/compliance-check-2

Test Workflow

Ask a legal question — get an answer generated live from this skill’s instructions.

Sign in to test this skill.

Related skills

Age Verification and Estimation Methods

Apache-2.0Cross-jurisdictionData protection

Evaluates and implements age estimation and verification technologies for online services. Covers facial age estimation, digital ID verification, self-declaration with risk assessment, AI-based age estimation, and the accuracy versus privacy tradeoff. Includes ICO guidance and euCONSENT framework. Keywords: age verification, age estimation, facial analysis, digital ID, children, online safety.

APEC Cross-Border Privacy Rules Certification

Apache-2.0Cross-jurisdictionData protection

Guides APEC Cross-Border Privacy Rules system certification process including self-assessment against the APEC Privacy Framework principles, accountability agent selection, intake questionnaire completion, certification decision, annual recertification, and Global CBPR Forum transition. Keywords: APEC, CBPR, cross-border privacy, accountability agent, certification, Global CBPR.

Assessing Health Data Processing

Apache-2.0Cross-jurisdictionData protection

Guides DPIA for health and medical data processing covering Art. 9(2)(h)-(j) exemptions, HIPAA crosswalk for transatlantic operations, clinical trial data protection under EU CTR 536/2014, and genetic data specifics under Art. 9(1). Activate for healthcare systems, clinical research, health apps, or medical device data. Keywords: health data, DPIA, Art. 9, clinical trial, genetic data, HIPAA, medical records, special category.

Auditoría de Protección de Datos — Orquestador Multi-jurisdicción

MITCross-jurisdictionData protection

Orquestador de auditorías de protección de datos en 8 jurisdicciones (RGPD, Ley 21.719, UK GDPR, LGPD, Ley 25.326, LFPDPPP, nFADP, CCPA/CPRA): detecta las leyes aplicables o acepta --ley, comparte el Paso 0 y entrega un informe consolidado con score por jurisdicción.

Auditoría Ley 21.719 — Protección de Datos Personales (Chile)

MITCross-jurisdictionData protection

Auditoría Ley 21.719 (Chile): detecta el sector y entrega informe con score, estado por artículo e issues priorizados. Sub-skill de /privacidad, también invocable sola.

CCPA / CPRA — Auditoría de Cumplimiento (California, EE.UU.)

MITCross-jurisdictionData protection

Auditoría CCPA/CPRA (California): umbrales de aplicación, 8 derechos del consumidor, opt-out y contratos con proveedores, con informe de score y sanciones en USD. Sub-skill de /privacidad, también invocable sola.