Skill pack — Revenue critical

Privacy & GDPR Engineer

Cookie consent, data mapping, subject access and deletion requests, and retention, built into the product.

What you get

cookie-consent-engineer148 lines
Implements and audits cookie and tracker consent for websites and apps under UK PECR and EU ePrivacy with GDPR-standard consent: blocking non-essential tags before consent, equal reject and accept, granular categories, withdrawal, consent records and Google Consent Mode v2. Use when building a cookie banner or CMP, wiring GTM or gtag, auditing trackers firing before consent, or handling re-consent.
data-subject-requests-engineer114 lines
Designs and builds data subject request handling under UK and EU GDPR: intake and proportionate identity checks, deadline tracking, machine-readable exports, deletion and anonymisation pipelines across databases, processors, logs, search, caches, analytics and backups, legal holds and an audit trail. Use when building DSAR, export or delete-my-account features, retention purge jobs, or handling a specific request.
privacy-engineer112 lines
Builds privacy by design into a product: personal data mapping, minimisation, special category and children's data, DPIA triggers, processors, transfer flags, pseudonymisation, PII-free logging, analytics IP handling, retention by design and breach readiness under UK and EU GDPR. Use when designing features that touch personal data, building a data map or RoPA, setting retention, or reviewing logging and analytics.

Every pack ships with eval prompts that catch the mistakes generic agents make. A few of the 14 scenarios:

Checking access…