# Agent37 Listing -- GDPR Privacy Policy & Compliance Document Generator

## Skill Name
GDPR Privacy Policy & Compliance Document Generator

## Tagline
Generate comprehensive, tailored GDPR compliance documents for UK and EU businesses -- privacy policies, cookie policies, DPIAs, ROPA, DSAR responses, breach notifications, and consent forms. Cites actual UK GDPR articles, DPA 2018, PECR, and ICO guidance.

## Category
Legal & Compliance

## Description

**The problem:** Every UK and EU business processing personal data needs GDPR compliance documentation. Solicitors charge GBP 500-2,000 for a privacy policy alone -- a full compliance pack costs thousands. Free generators like Termly and iubenda produce generic policies that miss sector-specific requirements, rarely cover the full document set, and do not cite actual legislation. Most small businesses have a copied privacy policy and nothing else -- no ROPA, no DPIAs, no breach plan.

**What this skill does:** Describe your business and data processing. Get back implementation-ready GDPR documents tailored to your sector, with correct lawful bases, Article references, and ICO-aligned guidance. Generates all 14 core GDPR document types:

- Website Privacy Policy (UK GDPR + PECR)
- Employee, Customer, and Supplier Privacy Notices
- Cookie Policy with audit table
- Data Processing Agreements and SaaS Addenda
- Records of Processing Activities (ROPA -- Art 30)
- Data Protection Impact Assessments (DPIA -- Art 35)
- Legitimate Interest Assessments (ICO three-part test)
- Granular Consent Forms (Art 7 compliant)
- DSAR Response Templates (30-day deadline)
- Data Breach Notifications (ICO 72-hour + data subject)
- Data Retention Schedules
- Internal Data Protection Policy
- International Data Transfer documentation (UK IDTA, SCCs)

**Why it's better than free generators:** Cites actual legislation (DPA 2018 sections, UK GDPR articles, PECR regulations). Covers the full document set, not just the privacy policy. Includes a lawful basis matrix, industry presets, and cross-references between documents. Flags when a DPIA is legally required, when consent must be explicit, and when you need a Legitimate Interest Assessment.

**Industry presets:** E-commerce, SaaS, healthcare, education, recruitment, financial services, hospitality -- each pre-populated with sector-specific processing activities, data categories, and regulatory requirements.

**Who it's for:** Any UK or EU business that processes personal data. Freelancers needing a website privacy policy. Startups building compliance from scratch. SMEs that cannot justify solicitor fees. DPOs wanting structured starting points. Consultants preparing documentation for clients.

## Example Prompts
- "Generate a privacy policy for my e-commerce website"
- "I run a SaaS company -- give me a full GDPR compliance pack"
- "Create a DPIA for our new AI recruitment screening tool"
- "I need a data processing agreement for our cloud hosting provider"
- "Generate a ROPA for a recruitment agency"
- "We've had a data breach -- draft the ICO notification and data subject letter"
- "Create a cookie policy for a website using Google Analytics, Meta Pixel, and Hotjar"
- "What GDPR documents does a healthcare clinic need?"

## Tags
gdpr, privacy-policy, data-protection, uk-gdpr, dpa-2018, pecr, ico, cookie-policy, dpia, ropa, dsar, data-breach, consent, data-processing-agreement, compliance, legal, privacy-notice, legitimate-interest, international-transfer, data-retention

## Pricing Recommendation
- Free tier: single document generation (e.g., one privacy policy)
- Pro: GBP 15-25/month (full compliance pack, all 14 document types, industry presets, ongoing updates)