Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews.

GDPR Data Handling Practical implementation guide for GDPR compliant data processing, consent management, and privacy controls. When to Use This Skill Building systems that process EU personal data Implementing consent management Handling data subject requests (DSRs) Conducting GDPR compliance reviews Designing privacy first architectures Creating data processing agreements Core Concepts 1. Personal Data Categories Category Examples Protection Level Basic Name, email, phone Standard Sensitive (Art. 9) Health, religion, ethnicity Explicit consent Criminal (Art. 10) Convictions, offenses Official authority Children's Under 16 data Parental consent 2. Legal Bases for Processing 3. Data Subject Rights Detailed worked examples and patterns Detailed sections (starting with Implementation Patterns ) live in references/details.md . Read that file when the navigation summary above is insufficient. Best Practices Do's Minimize data collection Only collect what's needed Document everything Processing activities, legal bases Encrypt PII At rest and in transit Implement access controls Need to know basis Regular audits Verify compliance continuously Don'ts Don't pre check consent boxes Must be opt in Don't bundle consent Separate purposes separately Don't retain indefinitely Define and enforce retention Don't ignore DSARs 30 day response required Don't transfer without safeguards SCCs or adequacy decisions

gdpr-data-handling