agentsclimarketplace

Uk gdpr

Skill bromso/metapowers/plugins/compliance/skills/uk-gdpr

A Claude Code plugin that adds an agentic skills framework, with MCP's and a meta prompting processes. Inspired by "Superpowers" & "Figma Console MCP", but not just for development or design; but for all aspect within the digital production cycle.

Install
npx -y skills add bromso/metapowers --skill uk-gdpr

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Assess UK GDPR compliance — post-Brexit requirements, ICO guidance, international transfers

SKILL.md

3.9 KB, as published. Nobody here has run it

UK GDPR Assessment

Assess UK General Data Protection Regulation compliance for "$ARGUMENTS". Evaluate UK-specific divergences from EU GDPR, ICO requirements, and UK international transfer mechanisms.

Prerequisites

Read .metapowers/compliance/$ARGUMENTS/00-scope.md. If this file does not exist, tell the user:

Phase 0 (Scope) has not been completed for "$ARGUMENTS". Run /compliance:regulatory-landscape $ARGUMENTS first, or use --skip-checks to bypass.

If --skip-checks is present in $ARGUMENTS, skip this check.

Process

  1. Read context files:

    • Read plugins/compliance/shared/grc-lifecycle-guide.md for GRC methodology reference
    • Read plugins/compliance/shared/assessment-template.md for output structure
    • Read .metapowers/compliance/$ARGUMENTS/00-scope.md for scope and control framework context

  2. UK GDPR applicability and divergences:

    • Assess whether UK GDPR applies (UK establishment, offering goods/services to UK, monitoring UK individuals)
    • Identify areas where UK GDPR diverges from EU GDPR
    • Review ICO as the supervisory authority and its enforcement approach
    • Assess dual compliance obligations if both EU and UK GDPR apply

  3. Lawful basis and consent (UK approach):

    • Assess lawful basis per processing activity under UK GDPR
    • Evaluate UK-specific legitimate interest balancing test (ICO three-part test)
    • Review age of consent for information society services (13 in UK vs 16 in EU)
    • Assess Age Appropriate Design Code (Children's Code) applicability

  4. International transfers (UK mechanisms):

    • Map all transfers outside the UK
    • Assess UK adequacy decisions (which countries have UK adequacy)
    • Evaluate UK International Data Transfer Agreement (IDTA) usage
    • Review UK addendum to EU Standard Contractual Clauses
    • Assess UK Transfer Risk Assessments (TRAs)
    • Evaluate transfers between UK and EEA (bridging provisions)

  5. PECR (Privacy and Electronic Communications Regulations):

    • Assess cookie consent compliance (PECR requirements)
    • Evaluate direct marketing consent (email, SMS, phone)
    • Review electronic communication security obligations
    • Assess cookie banner implementation and consent mechanisms

  6. UK-specific governance:

    • Assess DPO appointment under UK GDPR
    • Review ICO registration (data protection fee)
    • Evaluate UK representative appointment (if required for non-UK organizations)
    • Assess records of processing activities

  7. Breach notification (UK requirements):

    • Assess breach notification to ICO (72 hours)
    • Evaluate data subject notification procedures
    • Review breach severity assessment aligned with ICO guidance
    • Check breach register maintenance

  8. Write the artifact to .metapowers/compliance/$ARGUMENTS/01-assess/uk-gdpr.md following the assessment template structure with:

    • UK Applicability — territorial scope and dual compliance assessment
    • Divergence Analysis — UK vs EU GDPR differences with compliance impact
    • Lawful Basis Assessment — UK-specific approach including legitimate interest
    • Transfer Mechanisms — IDTA, UK addendum, adequacy, TRA status
    • PECR Compliance — cookies, direct marketing, electronic communications
    • ICO Governance — registration, DPO, representative requirements
    • Breach Readiness — ICO notification capability
    • Evidence Inventory — existing evidence and evidence gaps
    • Remediation Priorities — ranked list of gaps to address

Output

The UK GDPR assessment written to .metapowers/compliance/$ARGUMENTS/01-assess/uk-gdpr.md. Present a summary to the user highlighting:

  • Overall UK GDPR compliance score
  • Key divergences from EU GDPR requiring separate compliance effort
  • PECR compliance status
  • Top 3 gaps requiring remediation

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.