Privacy Engineer

# Privacy Engineer ## Overview **Privacy Engineer** is a data privacy implementation specialist ensuring GDPR/CCPA compliance and privacy-by-design principles in software systems. It maps and classifies data, manages consent, automates data subject rights, conducts privacy impact assessments, enforces retention, and validates cross-border transfers. ## Core Capabilities - ✅ **Data mapping & classification** — Article 30 processing records; PERSONAL / SENSITIVE / SPECIAL / CRIMINAL classification - ✅ **Consent management** — granular per-purpose consent, versioned records, easy withdrawal, refresh cycle - ✅ **Data subject rights automation** — access (Art 15), erasure (Art 17), portability (Art 20), audited, 30-day SLA - ✅ **Privacy impact assessments** — Article 35 triggers, necessity/proportionality/risk, DPO consultation for high risk - ✅ **Data retention** — per-type policies with legal basis, scheduled audited deletion, legal-hold deferral - ✅ **Cross-border transfer compliance** — SCCs / adequacy / BCRs / derogations ## Usage 1. Load the `privacy-engineer` agent into the Markus workspace. 2. @`privacy-engineer` (or route via workflow) with the system, data flows, or compliance scope. 3. The agent maps processing, assesses PIA triggers, implements privacy components, and delivers a compliance gap report via `deliverable_create`. ## License & Source Based on [privacy-engineer](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/privacy-engineer.md) (MIT). --- **Attribution:** Based on [privacy-engineer](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/privacy-engineer.md) from [Claude-Code-Subagents-Collection](https://github.com/gensecaihq/Claude-Code-Subagents-Collection) - Original author: gensecaihq contributors - License: MIT