Implement GDPR Data Handling Practices

GDPR Data Handling is a practical implementation guide for GDPR-compliant data processing, consent management, and privacy controls. It covers six concrete scenarios: building systems that process EU personal data, implementing consent management, handling data subject requests (DSRs), conducting GDPR compliance reviews, designing privacy-first architectures, and creating data processing agreements. For detailed patterns and examples it points to a separate resources/implementation-playbook.md.

Use it when a system needs to process EU personal data and needs consent management, DSR handling, a compliance review, privacy-first architecture decisions, or a data processing agreement drafted. It is not the right tool outside GDPR data-handling scope specifically - it names its scope narrowly rather than covering general privacy or security work.

Input is the specific GDPR scenario at hand (a system design, a consent flow, a data subject request, or an agreement to draft). Output is a compliant approach to that scenario, with deeper implementation patterns available in the linked playbook.

Engineers and privacy/compliance teams building or reviewing systems that process EU personal data who need practical guidance on consent, data subject requests, and privacy-first architecture rather than legal text alone.