Privacy & Data Protection Skills for AI Agents

The first structured, machine-readable privacy skills database for AI agents. 282+ open-source privacy compliance procedures covering GDPR, CCPA, EU AI Act, HIPAA, LGPD, PIPL, and India’s DPDP Act — following the agentskills.io open standard. Works with Claude Code, GitHub Copilot, OpenAI Codex CLI, Cursor, Gemini CLI, and 26+ AI platforms.

---

Quick Start

git clone https://github.com/mukul975/Privacy-Data-Protection-Skills.git
cd Privacy-Data-Protection-Skills/skills/privacy/conducting-gdpr-dpia
cat SKILL.md

Or install via Claude Code Plugin Marketplace:

/plugin marketplace add mukul975/Privacy-Data-Protection-Skills
/plugin install privacy-skills-complete@privacy-data-protection-skills

---

Regulation Coverage

---

Why This Exists

AI agents are increasingly used for privacy compliance tasks but operate with zero structured knowledge of privacy regulations, leading to:

• Hallucinated regulation citations (invented GDPR articles, wrong CFR sections)
• Missed jurisdiction-specific requirements (PIPL data localization, LGPD 10 lawful bases)
• Incorrect breach notification timelines (72h GDPR vs 60d HIPAA vs 3d Singapore)
• Dangerous oversimplification of cross-border transfer mechanisms

Each skill provides structured, verified regulatory knowledge that AI agents load on demand, replacing hallucination with precision.

Real-world use cases:

• An AI agent processing a Data Subject Access Request across EU and US jurisdictions
• An AI agent conducting a Privacy Impact Assessment for an AI system ahead of the EU AI Act August 2026 deadline
• An AI agent evaluating cross-border data transfer mechanisms (SCCs, BCRs, adequacy decisions) for a multinational organization

Disclaimer: These skills are educational reference materials, not legal advice. Consult qualified legal counsel for compliance decisions.

---

Skill Categories

---

How Skills Work

Every skill follows the agentskills.io open standard:

skills/privacy/conducting-gdpr-dpia/
  SKILL.md              # YAML frontmatter + workflow
  references/
    standards.md        # Regulatory citations, enforcement precedents
    workflows.md        # Step-by-step procedures with timelines
  scripts/
    process.py          # Working Python 3 automation (stdlib only)
  assets/
    template.md         # Filled real-world example

SKILL.md format:

---
name: conducting-gdpr-dpia
description: >-
  Conducts GDPR Data Protection Impact Assessments under Article 35
  following EDPB WP248rev.01 nine-criteria methodology.
license: Apache-2.0
metadata:
  author: mukul975
  version: "1.0"
  domain: privacy
  subdomain: privacy-impact-assessment
  tags: "dpia, gdpr, article-35, risk-assessment, edpb"
---

Progressive disclosure: agents load only YAML frontmatter (~30-50 tokens) for relevance matching. Full skill content loads only when needed. References, scripts, and templates load on demand.

---

Claude Code Plugin Marketplace

This repository is a Claude Code Plugin Marketplace with 21 installable plugins:

/plugin marketplace add mukul975/Privacy-Data-Protection-Skills
/plugin install privacy-skills-complete@privacy-data-protection-skills
/plugin install gdpr-compliance-skills@privacy-data-protection-skills
/plugin install healthcare-privacy-skills@privacy-data-protection-skills
/plugin install ai-privacy-governance-skills@privacy-data-protection-skills

See .claude-plugin/marketplace.json for the full plugin catalog.

---

How This Differs from Awesome-Privacy Lists

---

Framework Mappings

Skills are mapped to major compliance frameworks for organizations aligning their privacy programs:

---

Roadmap

• [x] v1.0.0 – 282 skills across 20 privacy domains
• [x] Claude Code Plugin Marketplace with 21 plugins
• [x] Framework mappings: NIST Privacy Framework, ISO 27701, OWASP Privacy Risks
• [ ] EU AI Act deep skills ahead of August 2026 enforcement
• [ ] India DPDP Act implementation rules (Phase 2: November 2026)
• [ ] Privacy automation workflows for DSAR, DPIA, breach pipelines
• [ ] Multi-language support
• [ ] GitHub Pages documentation site

---

Part of the AI Agent Skills Ecosystem

Together: 1,012+ structured skills across cybersecurity and privacy. One open standard. Every AI platform.

Built by Mahipal – M.Sc. Cybersecurity and AI.

---

Contributing

We welcome contributions from both developers and privacy professionals.

No Code Required: DPOs, privacy lawyers, and GRC analysts can contribute by describing privacy workflows in plain language. Use our issue templates or open a GitHub Issue – maintainers will convert your description into the agentskills.io format and credit you as a contributor.

Privacy professionals:

• Request a new skill via GitHub Issues
• Suggest improvements to existing skills

Developers:

• See CONTRIBUTING.md for the full guide
• Fork, branch (feat/skill-name), PR following the agentskills.io format

---

Cite This Repository

If you use this skills database in your research or work, please cite it:

@misc{mahipal2026privacyskills,
  author       = {Mahipal},
  title        = {Privacy \& Data Protection Skills for AI Agents},
  year         = {2026},
  publisher    = {GitHub},
  url          = {https://github.com/mukul975/Privacy-Data-Protection-Skills},
  version      = {1.0.0},
  note         = {282+ structured privacy skills following the agentskills.io open standard}
}

GitHub also provides a citation button – click “Cite this repository” in the sidebar.

---

Sponsor

If this project helps your privacy compliance work, consider supporting its development:

Your support helps maintain 282+ skills, track regulatory changes, and expand coverage to new jurisdictions and frameworks.

---

License

Apache 2.0. See LICENSE for details.

Copyright 2025-2026 Mahipal