AgenticFor DevelopersCybersecurity & Privacy

GDPR & Privacy Engineering Advisor.

When building or auditing an application that handles personal data from users in regulated regions.

ChatGPT Β· Claude Β· GeminiΒ·AdvancedΒ·~1750 tokens
Curated by the AIPP team
Last updated 14 May 2026 Β· v3
gdpr-privacy-engineering-advisor-4.md Β· 1750 words
You are a senior {{role}} brought in to help a developer or tech professional complete a {{use_case}} task.

# Context
- Pack: Developers & Tech Professionals
- Category: Cybersecurity & Privacy
- Use case: GDPR & Privacy Engineering Advisor
- Source task:
  - Advise on implementing GDPR (or {{ccpa_pdpb_lgpd}}) compliance for {{describe_the_application_type_data_collected_user_base_location}}.
  - Step 1: data inventory : what personal data is collected, where it's stored, who accesses it, and for how long.
  - Step 2: legal basis documentation for each data processing activity.
  - Step 3: technical controls required (encryption at rest/transit, pseudonymisation, data minimisation, retention automation).
  - Step 4: user rights implementation (access, erasure, portability, objection).
  - Step 5: privacy notices and cookie consent implementation.

# Goal
Data inventory framework, legal basis documentation, technical controls, user rights implementation, and privacy notice/consent design.

# Constraints
- Think like an expert advisor before writing the final output.
- Ask clarifying questions only if missing information would materially change the result.
- Avoid generic filler, vague advice, and unsupported claims.
- Make the output specific, practical, and ready to use.

# Output
Data inventory framework, legal basis documentation, technical controls, user rights implementation, and privacy notice/consent design.

The variables to fill in

PlaceholderWhat to put thereExample
{{role}}Roleprivacy engineer and data protection advisor
{{use_case}}Your specific valuegdpr & privacy engineering advisor
{{ccpa_pdpb_lgpd}}Ccpa pdpb lgpdCCPA
{{describe_the_application_type_data_collected_user_base_location}}Describe the application type data collected user base locationtype

How to customize this prompt

  1. Replace each {{double-curly}} with your real context.
  2. Adjust the constraints section to match your tone β€” formal, casual, blunt.
  3. If the engagement is recurring, change the duration line to mention milestones rather than days.
  4. Run it in your tool of choice. The output should be ready to paste with at most one small edit.

When to use

When building or auditing an application that handles personal data from users in regulated regions.

PRO TIP

Privacy by design is cheaper than privacy by retrofit β€” implement data minimisation and retention automation from the start, not after a regulator asks for it.

Related prompts

Structured

Technical Problem Debugger

Debug this problem systematically. Identify the root cause, explain why it is happening, provide the fix, and explain how to prevent it in future.

Structured

System Design Advisor

Design the high-level architecture for this system. Cover components, data flow, scaling strategy, and key design decisions.

Structured

No-Code Tool Selector

Recommend the best no-code or low-code tool stack for the stated goal, with implementation guidance.

Structured

Data Analysis Prompt

Design the complete analysis approach for the stated question. Include the analytical method, the steps to execute it, and the format for presenting findings.

β˜… THIS PROMPT IS IN A PACK

The Developer Toolkit Pack

250 technical prompts for code review, documentation, architecture planning, debugging, test writing, API design, and career growth β€” built by developers for developers.

Browse more prompts β†’