ibrdot/agentic-bundle-aas-privacy-compliance-engineering

This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.

Data privacy control register: data category, lawful basis, retention period, access roles, encryption and consent requirement per module. Use for GDPR compliance.

Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), producing an audit-traceable findings report with per-control remediation.

Practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls.

Review payment data flows and engineering control evidence for a scoped PCI assessment, without claiming certification.

Use when building apps that collect user data. Ensures privacy protections are built in from the start—data minimization, consent, encryption.