GDPR Legitimate Interest Assessment Skill

𝐀𝐧𝐨𝐭𝐡𝐞𝐫 𝐝𝐚𝐲, 𝐚𝐧𝐨𝐭𝐡𝐞𝐫 𝐒𝐊𝐈𝐋𝐋: 𝐆𝐃𝐏𝐑 𝐋𝐞𝐠𝐢𝐭𝐢𝐦𝐚𝐭𝐞 𝐈𝐧𝐭𝐞𝐫𝐞𝐬𝐭 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭 - 𝐟𝐫𝐨𝐦 𝐃𝐢𝐫𝐞𝐜𝐭 𝐌𝐚𝐫𝐤𝐞𝐭𝐢𝐧𝐠 𝐭𝐨 𝐀𝐈 𝐓𝐫𝐚𝐢𝐧𝐢𝐧𝐠.

2,327 lines. 10 files. Every major source encoded:
→ EDPB Guidelines 1/2024 (three-step test)
→ EDPB Opinion 28/2024 (AI models + legitimate interest)
→ The brand-new EDPB OSS Case Digest by Dr. TJ McIntyre (62 decisions + 5 binding decisions)
→ CNIL AI guidance (June 2025) on web scraping + LI
→ ICO guidance including the new UK "Recognised Legitimate Interest"
→ 12 CJEU judgments from Meta to KNLTB to SCHUFA
→ National DPA positions from DE, FR, NL, AT, IT, ES
→ German DSK, Hamburg, Bavaria, Baden-Württemberg guidance

What it does: Walk through the full Art. 6(1)(f) assessment: from pre-assessment gates through the three-step test to a documented LIA output (docx file). With real enforcement patterns baked in. Not theory but grounded in what DPAs actually decided.

—

𝐁𝐮𝐭 𝐡𝐞𝐫𝐞'𝐬 𝐭𝐡𝐞 𝐛𝐢𝐠𝐠𝐞𝐫 𝐩𝐢𝐜𝐭𝐮𝐫𝐞.
I'm building toward a modular skill library where each skill encodes deep domain expertise for specific compliance tasks.
One skill = one task, done at expert level.
Chain them = complex compliance workflows, automated.
Equip an agent (squad) with the right skills = the work gets done at practitioner level.

That's what turns a general-purpose LLM into a domain expert. Not the model itself, the encoded expertise you give it.

The end state? Specialized Claude Code agents each loaded with the skills they need, handling the grunt work of GDPR, AI Act, NIS2, and other digital regulation compliance. The assessments. The documentation. The monitoring.
So skills/agents will not replace the lawyer but the time-consuming manual labor that keeps the lawyer from doing what actually matters: judgment, strategy, client counsel.

The Legitimate Interest Assessment skill is available on Lawve AI as part of my growing compliance skills library.