Privacy Notice Gap Checker
Privacy notices are often riddled with vague language, missing disclosures, and contradictions that create significant regulatory risk.
$6.99
Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
DeepSeek
Muse+22 moreClaude CodeCursorCodex CLIDeepSeekMuse
Dots
Manus
Grok
Grok Bot+18 agentsPrivacy Notice Gap Checker
Example session with this skill installed
Review this draft privacy notice for a UK SaaS. It says 'we keep data as long as necessary' but our policy says 6 years. It also fails to mention our use of AWS for hosting in the US.
- Read your context and instructions
- Compiled the privacy notice gap
I have completed the gap review for the UK SaaS privacy notice. The analysis identifies material inconsistencies between your internal policy and the public disclosures, specifically regarding retention periods and international transfers.
Privacy Notice Gap Review
1. Scope, Jurisdiction and Confidence
- Organisation: [Name] SaaS
- Jurisdiction: UK (UK GDPR)
- Confidence: Medium. Retention policy provided, but specific AWS contract safeguards are unverified.
2. Notice Coverage Map
| Disclosure Topic | Supplied Wording | Operational Fact | Status | Verification Note |
|---|---|---|---|---|
| Data Retention | "as long as necessary" | 6 years per internal policy | Conflict | Update notice to reflect specific term |
| Sharing/Transfers | Not mentioned | AWS (USA) | Missing | Verify transfer mechanism (IDTA/SCCs) |
3. Prioritised Gap Register
| ID | Issue | Source | Evidence | Priority | Action |
|---|---|---|---|---|---|
| G-001 | Vague retention term | Section 4 | Policy v1.2 | High | Replace with specific retention criteria |
| G-002 | Missing US transfer | N/A | DevOps Map | High | Add AWS disclosure and US transfer basis |
4. Draft Improvements (Subject to Approval)
Issue: G-001 (Retention)
- Original: "We keep your personal data for as long as necessary to fulfill the purposes we collected it for."
Proposed: "We retain your personal data for a period of six years following the termination of your account to comply with our legal and accounting obligations."
- Confirmation Required: Confirm if any categories (e.g., logs) have shorter cycles.
Issue: G-002 (AWS/Transfers)
- Original: [Gap]
Proposed: "We share your information with our hosting provider, Amazon Web Services (AWS), located in the United States. We ensure a similar degree of protection is afforded to it by [CONFIRM: UK International Data Transfer Agreement / SCCs]."
Next steps
- Verify the specific legal mechanism used for US data transfers with AWS.
- Confirm if the 6-year retention period applies to all data types or just financial records.
- Submit the draft improvements to your legal counsel for final sign-off.
Disclaimer: This output is a preliminary gap triage and requires professional legal review before publication.
Connects securely to your tools. The creator never sees your data.
About this skill
Privacy notices are often riddled with vague language, missing disclosures, and contradictions that create significant regulatory risk. This skill reviews public-facing privacy notices to identify gaps between actual data processing activities and what is publicly disclosed. It produces a structured, evidence-based register that maps every clause to operational facts, highlighting ambiguities and omissions without inventing legal rules.
What it does
- Clause mapping extracts and categorizes specific notice excerpts regarding data categories, purposes, and sharing.
- Gap identification builds a facts-to-notice crosswalk to find unsupported statements or missing operational disclosures.
- Remediation drafting provides plain-language suggested improvements with clearly labeled conditional placeholders.
- Triage prioritization assigns priority levels to omissions based on their impact on individual rights and transparency.
- Action planning generates a traceable register with owner roles, verification requirements, and approval checkpoints.
How it works
- Scope definition requires input of the notice text, business activities, and specific jurisdictions involved.
- Analysis execution compares the supplied notice against confirmed operational facts like retention schedules and recipient categories.
- Report generation delivers a full gap register, a prioritised action plan, and a list of outstanding legal verification questions.
Frameworks & tools
This tool works with any public-facing privacy notice text and internal processing records. It supports reviews for various jurisdictions including GDPR, UK GDPR, and state-specific privacy laws when provided with a user-defined checklist.
Why this beats prompting it yourself
Generic prompts often hallucinate legal requirements or assume a single jurisdiction applies globally. This skill enforces a strict evidence hierarchy, ensuring every finding is tied to either the notice text or a confirmed operational fact rather than a template.
Use cases
- Auditing an existing website privacy notice for missing third-party processor disclosures.
- Mapping a draft notice against a newly created internal processing inventory.
- Identifying vague retention language and drafting specific, fact-based alternatives.
- Preparing a prioritized action list for a privacy team ahead of a formal legal review.
Known limitations
This is a gap-triage tool, not a legal compliance audit or certificate. It cannot select lawful bases, invent retention periods, or confirm legal applicability without user-supplied facts.
Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Legal & Compliance.
Does not provide legal certification or compliance advice. Requires user-supplied processing facts and jurisdictions to be effective. Cannot invent retention periods or lawful bases.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before buying a skill.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 18 days ago