GDPR Audit - GDPR合规审计

GDPR Compliance Audit — General Data Protection Regulation (EU) 2016/679 (GDPR). Free to install; scoring runs on the CQDev cloud compliance engine (free API Key, 100 free calls). Covers 25 core items. Use when: the user asks to run the gdpr-audit skill, or requests a GDPR 合规深度审计 / General Data Pro

🔒 GDPR 合规深度审计 — Free 审计 (Cloud-Scored)

Overview

GDPR 合规深度审计 is a free 审计 based on 欧盟《通用数据保护条例》（GDPR, Regulation (EU) 2016/679）. It covers 25 core items. Scoring runs on the CQDev cloud compliance engine.

How it works (free + cloud)

⚠️ Your answers leave this machine. When you run a scored 审计, your responses are transmitted to the CQDev cloud at compliancehub.cn for scoring. Run --non-interactive for a fully offline preview that never contacts the cloud.

• The skill is free to install.
• Check items are served from the cloud rule library (always current).
• Scoring + quota are computed in the cloud; you get a professional report locally.
• A free API Key (100 calls) is required for scoring. Register in seconds.

What it checks (25 items)

#	Check	Authority
1	适用范围	Art. 3
2	处理原则	Art. 5
3	合法依据	Art. 6
4	同意	Art. 7
5	特殊类别数据	Art. 9
6	透明告知	Art. 12
7	收集时信息	Art. 13-14
8	访问权	Art. 15
9	更正权	Art. 16
10	删除权	Art. 17
11	限制处理权	Art. 18
12	可携权	Art. 20
13	反对权	Art. 21
14	自动决策	Art. 22
15	问责	Art. 24
16	设计与默认保护	Art. 25
17	处理者管理	Art. 28
18	处理活动记录	Art. 30
19	处理安全	Art. 32
20	向监管通报违约	Art. 33
21	向数据主体通报	Art. 34
22	数据保护影响评估	Art. 35
23	事前协商	Art. 36
24	数据保护官	Art. 37-39
25	国际传输	Art. 44-49

Usage

Free preview (no Key)

bash

python3 scripts/gdpr-audit.py --non-interactive

Get a free API Key

bash

python3 scripts/gdpr-audit.py --login
# enter email + password → Key auto-written to ~/.config/compliancehub/gdpr-audit.key (mode 0600)

Or open: https://compliancehub.cn/account.html?skill=gdpr-audit

Full 审计 + report

bash

python3 scripts/gdpr-audit.py --format html -o gdpr-audit-report.html

Agent guide

When a user asks for a GDPR 合规深度审计:

1. Run --non-interactive to preview the 25 items (no Key needed).
2. If the user wants a scored report, prompt them to get a free Key (--login or the account page), then run the full 审计.

Security & data handling

• Account credentials (only on explicit --login): When you run --login/--auth, the skill prompts for your email + password and POSTs them ONLY to compliancehub.cn's official auth endpoints (/api/v1/auth/register, /api/v1/auth/login) to create your account and issue the free API Key.
• Where data goes: Check items are fetched from, and your answers are scored by, the CQDev cloud at https://compliancehub.cn (the operator's official endpoint). Scoring transmits only your item answers and the free API Key (as a Bearer token).
• API Key storage (user-initiated only): written only when you run --login to ~/.config/compliancehub/gdpr-audit.key (0600), outside the skill folder. Or pass via COMPLIANCEHUB_API_KEY.
• No shell execution: stdlib only (urllib, json, ssl, getpass); no shell, no external binaries.
• Not a rogue/autonomous agent: Key persistence is ordinary API-key storage, not installation/auto-start.
• Preview without cloud: --non-interactive never contacts the cloud.
• Always confirm the destination is compliancehub.cn before running a scored check.

Legal disclaimer

This tool provides general compliance guidance only and is not legal advice. Consult qualified counsel.

License

MIT.