[agents](https://carteblanche.com/index.md?kind=agent) / [legal & compliance](https://carteblanche.com/index.md?category=legal) # gdpr-ccpa-compliance what it does Use when the user needs to understand GDPR or CCPA compliance, review data practices, or assess privacy requirements. Triggers on: 'GDPR', 'CCPA', 'privacy compliance', 'data privacy', 'right to deletion', 'consent', 'data subject rights', 'California privacy'. tools it asks for Reads files · Uses the web by VoltAgent · version 1 · license MIT We imported this agent from its author’s repository. Is this yours? [Claim this listing](https://carteblanche.com/claim/gdpr-ccpa-compliance) Verified · Before and after: 2 models · 1 try per case · [View source](https://github.com/VoltAgent/awesome-claude-code-subagents/blob/ed74d115b7fb7026a22a4f816a8e3250f425e3b4/categories/04-quality-security/gdpr-ccpa-compliance.md) · [Install from your agent](https://carteblanche.com/connect.md) · [Download .zip](https://carteblanche.com/skills/gdpr-ccpa-compliance/download) ## Compare the answers Answers from Claude Sonnet 5.5 and GPT-6.1 Sol · try 1 of 1 Same request, same model, once with the agent’s instructions as its system prompt and once without. Neither could use a tool. Read both and judge for yourself. [Compare the answers](https://carteblanche.com/skills/gdpr-ccpa-compliance/compare) ## The models 2 models Claude Sonnet 5.5 made by Anthropic claude-sonnet-5-5 · revision not reported by the provider 1 try per case · tested 7 Nov 2026 GPT-6.1 Sol made by OpenAI gpt-6.1-sol · revision not reported by the provider 1 try per case · tested 7 Nov 2026 ## The tasks written by Carte Blanche **example-1** “We run a small B2C meal-kit startup based in Austin with about 40,000 customers, roughly 15% in California and some in Germany and France. We collect name, email, delivery address, dietary preferences (which sometimes hint at health conditions or religion), and card tokens via Stripe. We also use Meta Pixel and Google Analytics on the site. Which of GDPR and CCPA/CPRA apply to us, and what are the top five things we need to fix first? Please flag anything about the dietary data that might count as sensitive.” **example-2** “A user just emailed asking us to delete all their data under their 'right to deletion'. Our stack: Postgres production DB, nightly S3 backups kept 90 days, Mailchimp for marketing, Zendesk for support tickets, and order records we need for tax purposes for 7 years. Can you walk me through how to handle this request under both GDPR and CCPA? I need to know what we must delete, what we can legitimately retain, the response deadlines, and how to word the reply to the user.” ## Install Download the .zip and unzip it. Put `gdpr-ccpa-compliance.md` here: Claude Code · `~/.claude/agents/` · Every project. For one project only, use .claude/agents/ inside it. It gives the agent the tools it asks for, and no others. Cursor · `~/.cursor/agents/` · Cursor also reads the Claude Code folder above. It has no tools field, so it gives every agent every tool, whatever this one asks for. Codex · Codex’s custom agents are TOML files, not Markdown, so this agent doesn’t install there. Keep its license file beside it, as `gdpr-ccpa-compliance.LICENSE`: a name that doesn’t end in .md, since every .md file there is read as an agent. Then start a new session and ask for it by name. Folders checked 6 November 2026. Or [install from your agent](https://carteblanche.com/connect.md): ask it to install `gdpr-ccpa-compliance` from Carte Blanche. ## Badge for your README Carte Blanche: Verified Paste this into the agent’s README. It links to this page, and shows how the listing stands whenever it’s loaded. ``` [![Carte Blanche](https://carteblanche.com/badge/gdpr-ccpa-compliance.svg)](https://carteblanche.com/skills/gdpr-ccpa-compliance) ``` ## About this test - **tested**: 7 Nov 2026 - **version tested**: v1 - **cases**: 2 - **tries per case**: 1 try per case - **run without the agent**: yes - **cases written by**: Carte Blanche - **size**: 4322 characters What this shows, and what it doesn’t How 2 models answered these 2 requests, with and without the agent. It says nothing about other models, and it doesn’t limit what your own agent can do. The answers were written without tools: the agent’s instructions were the system prompt, and it read no file and ran nothing. [How we test](https://carteblanche.com/how-it-works.md)