DPC GDPR Personal Data (Legal Basis)
Get Started with This SkillOverview
Personal data for DPC self-assessment: consent (Art. 7–9), children (Art. 8), and legitimate interest assessment.
Getting Started
Add your source materials to the project workspace, then activate the DPC GDPR Personal Data (Legal Basis) skill. The agent will guide you through the process step by step.
Example conversation
You: We’re not sure our consent is GDPR-standard, and we use legitimate interest for some B2B marketing. We need either a consent review or a proper legitimate interest assessment.
Agent: I’ll use the personal data reference (consent Art. 7–9, children Art. 8, legitimate interest). For consent: I’ll checklist whether it’s freely given, specific, informed, and a clear affirmative action; whether you can demonstrate it; and withdrawal. If you have children’s services, I’ll add age verification and parent/guardian consent. For legitimate interest: I’ll draft an LIA—identified interest, necessity of the processing, and balance against the individual’s rights—so you have a documented basis. I won’t decide for you; I’ll produce the analysis and wording you can adopt or adapt.
Output excerpt
Legitimate interest assessment (excerpt) — B2B marketing
Interest — Promoting our B2B services to business contacts who have a relevant role (e.g. decision-makers in our target segment).
Necessity — Processing (storing contact details and sending relevant B2B communications) is necessary to pursue that interest; we do not rely on consent for this B2B channel.
Balance — Contacts are business (not consumer) data; we use limited data (name, role, company, email); we provide clear opt-out in every email and in our notice; we do not send high-frequency or intrusive messaging. We have weighed this against the individual’s interests and conclude the balance is in favour of the controller for this B2B context.
Conclusion — Legitimate interest (Art. 6(1)(f)) is an appropriate legal basis for this processing, subject to honouring objections and keeping the LIA under review.
For consent-based processing: use a checklist (freely given, specific, informed, affirmative action, demonstrable, withdrawal) and, for children’s services, age verification and parent/guardian consent (e.g. Ireland age 16).
Extension and validation
This skill does not include custom validation tools. Elaboration is guided by the skill workflow and reference materials. You can add tools in extension.ts later (e.g. to check required sections or checklist coverage) if you want automated validation.