Privacy Data Data Mapping Gdpr

---
name: privacy-data-data-mapping-gdpr
description: "Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program."
---
# Map personal data flows for GDPR readiness

> Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.

**Track:** ⚖️ Legal & Compliance · **Domain:** Privacy & Data Protection · **Level:** intermediate · **~45 min**

**Who this is for:** Legal Ops, Privacy Officers, Compliance Teams, Founders, Engineers

## When to Use This Skill

Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.
Use it whenever a matching task appears in conversation — the agent loads these instructions on demand.

## Steps

1. Inventory systems holding personal data with owners per store
2. Classify data categories: identity, behavioral, special categories
3. Document lawful basis per processing purpose; no 'legitimate interest' dumping
4. Map cross-border transfers with safeguard mechanisms noted
5. Record retention periods and deletion mechanics per category
6. Review the map quarterly and at every new integration

## Common Pitfalls

- Shadow SaaS tools missing from the map entirely
- Retention 'indefinite' defaults in databases

## Success Signals

- 100% systems mapped with owners
- Zero unmapped processors

## Commands

**Install with skills CLI**
```bash
npx skills add aniruddhaadak80/skills --skill privacy-data-data-mapping-gdpr
```

**Install globally**
```bash
npx skills add aniruddhaadak80/skills --skill privacy-data-data-mapping-gdpr -g
```

---

Part of [aniruddhaadak80/skills](https://github.com/aniruddhaadak80/skills) · Browse all at https://skills.sh/aniruddhaadak80/skills