GDPR Audit - GDPR合规审计工具

🔒 GDPR 合规深度审计 — Free 审计 (Cloud-Scored)

Overview

GDPR 合规深度审计 is a free 审计 based on 欧盟《通用数据保护条例》（GDPR, Regulation (EU) 2016/679）. It covers 25 core items. Scoring runs on the CQDev cloud compliance engine.

How it works (free + cloud)

⚠️ Your answers leave this machine — but only when scored. When you run a scored 审计, your responses are transmitted to the CQDev cloud at compliancehub.cn for scoring. In --non-interactive preview mode your answers are NOT sent; the preview attempts to fetch the latest rule set from the cloud rule library and falls back to a built-in snapshot if it cannot reach the cloud.

• The skill is free to install.
• Check items are served from the cloud rule library (always current).
• Scoring + quota are computed in the cloud; you get a professional report locally.
• A free API Key (100 calls) is required for scoring. Register in seconds.

What it checks (25 items)

Usage

💡 交互提示：逐项作答时可直接输入中文（是 / 否 / 不适用），输入 ? 可查看该项的合规建议； 作答进度自动存为草稿，中断后重新运行会提示「继续 / 重新开始」。

Free preview (no Key)

python3 scripts/gdpr-audit.py --non-interactive

Get a free API Key

# 1) Open the account center, register, and copy your free Key:
open https://compliancehub.cn/account.html?skill=gdpr-audit
# 2) Hand the Key to this skill (pick one):
export COMPLIANCEHUB_API_KEY=<网页显示的 Key>
# or persist it to a key file (mode 0600, outside the skill folder):
mkdir -p ~/.config/compliancehub && echo '<网页显示的 Key>' > ~/.config/compliancehub/gdpr-audit.key

Full 审计 + report

python3 scripts/gdpr-audit.py --format html -o gdpr-audit-report.html

Agent guide

When a user asks for a GDPR 合规深度审计:

1. Run --non-interactive to preview the 25 items (no Key needed).
2. If the user wants a scored report, prompt them to get a free Key at the account page (https://compliancehub.cn/account.html?skill=gdpr-audit) and supply it via COMPLIANCEHUB_API_KEY or the key file, then run the full 审计.

Security & data handling

• No account credentials collected: This skill never prompts for or transmits your email/password. The free API Key is obtained from the web account center (https://compliancehub.cn/account.html?skill=gdpr-audit) and supplied to the skill via COMPLIANCEHUB_API_KEY or ~/.config/compliancehub/gdpr-audit.key.
• Where data goes: Check items are fetched from, and your answers are scored by, the CQDev cloud at https://compliancehub.cn (the operator's official endpoint). Scoring transmits only your item answers and the free API Key (as a Bearer token).
• API Key storage: you write the Key yourself (from the web account center) to ~/.config/compliancehub/gdpr-audit.key (0600), outside the skill folder, or pass it via COMPLIANCEHUB_API_KEY. This skill never writes credentials on its own.
• No shell execution: stdlib only (urllib, json, ssl); no shell, no external binaries.
• Not a rogue/autonomous agent: Key persistence is ordinary API-key storage, not installation/auto-start.
• Preview mode: --non-interactive does not send your answers. It attempts to fetch the latest rule set from the cloud rule library and falls back to a built-in snapshot when offline.
• Always confirm the destination is compliancehub.cn before running a scored check.

Legal disclaimer

This tool provides general compliance guidance only and is not legal advice. Consult qualified counsel.

License

MIT.