GDPR Shift-Left

Provides up-to-date GDPR guidance, DPIA templates, ROPA checks, and code/infrastructure analysis for shift-left compliance.

python

0

GitHub Stars

python

Language

4 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "kevinrabun-gdprshiftleftmcp": {
      "command": "python",
      "args": [
        "-m",
        "gdpr_shift_left_mcp"
      ],
      "env": {
        "GDPR_CACHE_DIR": "__gdpr_cache__",
        "GDPR_CACHE_TTL": "3600s",
        "GDPR_SOURCE_URL": "https://example.org/gdpr-data"
      }
    }
  }
}

You deploy and run a GDPR compliance MCP server directly in your development environment to access GDPR guidance, risk assessments, and automation workflows during coding. It brings structured data protection knowledge into your IDE, helping you shift left on privacy by design without replacing legal counsel for binding decisions.

How to use

You interact with the GDPR Shift-Left MCP Server through an MCP-enabled client. Start the local server, then connect your editor or IDE to it using the provided stdio configuration. Once connected, you can look up GDPR articles, navigate chapters, run DPIA assessments, generate ROPA templates, view DSR guidance, and perform infrastructure and code analyses to identify potential GDPR violations. Use the tools to guide your development decisions, capture compliance artifacts, and reference Azure mappings when aligning controls with cloud resources.

How to install

Prerequisites: ensure Python 3.11 or newer is installed on your system. You also need a compatible IDE or editor that supports MCP via the client you choose (for example, VS Code with a compatible MCP plugin). Ensure you have network access if you plan to fetch online GDPR data.

# Clone the project repository
git clone https://github.com/KevinRabun/GDPRShiftLeftMCP.git
cd GDPRShiftLeftMCP

# Install in development mode
pip install -e ".[dev]"

Running the server

You can run the server in two supported ways. Choose one and start streaming GDPR capabilities into your MCP client.

# Run via Python module entry point
python -m gdpr_shift_left_mcp

# Or run via the installed entry point
gdpr-shift-left-mcp

Connecting your MCP client

Configure your MCP client to use one of the provided stdio servers. The local command treats the server as a standard input/output service that your editor communicates with.

Additional notes

The server fetches GDPR data from an online source with local caching. You can customize the source URL and cache behavior using environment variables to suit your environment. If online data cannot be retrieved, the server falls back to built-in data to maintain functionality.

Security and data handling considerations

This tool provides informational guidance and is not legal advice. Treat generated outputs as informational only and consult qualified legal counsel for binding GDPR decisions. Do not rely on the MCP server as a sole source for compliance determinations.

Available tools

get_gdpr_article

Retrieve a GDPR article by number across all articles and recitals.

list_chapter_articles

List all articles within a selected GDPR chapter.

search_gdpr

Perform a full-text search across GDPR articles and recitals.

get_gdpr_recital

Retrieve a specific GDPR recital by number.

get_azure_mapping

Show Azure services and controls mapped to a GDPR article.

get_gdpr_definition

Fetch the Art. 4 term definition with context.

list_gdpr_definitions

List all Art. 4 definitions.

search_gdpr_definitions

Search Art. 4 definitions by keyword.

assess_dpia_need

Check if a DPIA is required using the EDPS criteria.

generate_dpia_template

Create a DPIA document template.

get_dpia_guidance

Provide DPIA guidance for sections 35–36.

generate_ropa_template

Generate an Art. 30 ROPA template.

validate_ropa

Validate ROPA completeness and integrity.

get_ropa_requirements

Detail ROPA field requirements.

get_dsr_guidance

Provide DSR handling guidance for Arts. 12–23.

generate_dsr_workflow

Create a DSR fulfillment workflow.

get_dsr_timeline

Return DSR response timelines per article 12(3).

analyze_infrastructure_code

Analyze IaC for GDPR issues such as encryption and residency.

analyze_application_code

Analyze application code for GDPR issues like PII logging.

validate_gdpr_config

Validate GDPR configuration in strict or advisory mode.

assess_retention_policy

Assess retention policy against GDPR Art. 5(1)(e).

get_retention_guidance

Provide category-specific retention guidance.

check_deletion_requirements

Check capabilities for data deletion under GDPR.