DPA Review
Reviews a Data Processing Agreement term-by-term against your DPA playbook, with redlines and a memo.
- Repository
- anthropics/claude-for-legal
- Stars
- 9,870
- Licence
- Apache-2.0
- Files
- 1 file
What it does
When you ask it to review a Data Processing Agreement (the contract that governs how a vendor or customer handles personal data), the agent first works out whether your company is the processor or the controller, then checks each clause against your saved DPA playbook for that role. It also checks the DPA against your privacy policy and flags federal sector rules such as HIPAA, GLBA, FERPA or COPPA when relevant. The output is a review memo with suggested redlines, saved to your outputs folder.
Great for
- In-house privacy or legal teams reviewing customer or vendor DPAs
- Lawyers who have already written a DPA playbook in their configuration and want consistent first-pass reviews
- Legal staff who need a record of prior triage or PIA work checked against a new DPA
Skip it if
- Final legal sign-off: the skill produces a first-pass review, and a qualified lawyer must check it, since jurisdiction and sector assumptions may not fit your situation
- Organisations without a configured DPA playbook: the skill stops and asks for setup, so it adds little value without one
Try asking
- “review this DPA and tell me where it deviates from our playbook”
- “/privacy-legal:dpa-review customer-dpa.pdf”
- “check this data processing addendum before we sign it”
- “customer sent their DPA, is this okay for us as the processor”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.
dpa-review.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip dpa-review.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip dpa-review.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Complete the setup placeholders in your privacy-legal CLAUDE.md before running it, since the skill stops if they are still present
- State clearly whether you are the processor or controller if the agent asks, because getting this wrong inverts every recommendation
- Keep the playbook and privacy policy commitments up to date so the consistency check is meaningful
What's inside
- SKILL.md
Redistributed unmodified from anthropics/claude-for-legal under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.