consent-compliance
Skill0 starsChanged 5 months agoMITView on GitHub
Implement granular, logged, withdrawable user consent plus data export and hard-delete (DSAR), for GDPR / DPDP-style compliance. Use for any app that collects personal data.
In this repository7 other files it gives its agents.
- ai-proxy-guardSkill
- context-checkpointSkill
- monorepo-bootstrapSkill
- review-gateSkill
- rls-securitySkill
- security-reviewSkill
- test-and-fixSkill
The file
Files
consent-compliance
A reusable consent + data-rights layer for apps handling personal data.
Do
- Granular consent at signup — separate, UNTICKED checkboxes per purpose, e.g. (a) Terms + Privacy [required], (b) processing of any sensitive data [required, explicit], (c) marketing [optional], (d) analytics [optional]. Never bundle purposes together.
- Consent log — record each consent with: user id, purpose, policy version, timestamp. Re-prompt when the policy version changes.
- Easy withdrawal — withdrawing a consent is as easy as granting it (a settings toggle).
- Data rights (DSAR) — implement export (all of a user's data) and hard-delete (delete truly wipes all of the user's rows). Prove delete with a test.
- Minimise + protect — collect the least data needed; encrypt in transit and at rest.
- Docs — ship a privacy policy + terms; if relevant, complete app-store data-safety forms.
Notes
This is a strong default for GDPR (EU), India's DPDP, and CCPA-style rules — building to this bar covers most consumer privacy regimes. It is not legal advice; have your policies reviewed once.
Done when
Consents are granular + logged + withdrawable; the delete test wipes all user data; export works.
Token tactics
Scope to the consent module. Generate policy text once and reference it. Route to a frontier model — this carries legal exposure.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.