Skip to content
Get packs

Privacy Use Case Triage

Decide whether a data processing activity needs a PIA or DPIA, can proceed, or must stop

Source Download skill
Repository
anthropics/claude-for-legal
Stars
9,870
Licence
Apache-2.0
Files
1 file

What it does

When installed, the agent acts as a first-pass privacy gatekeeper for new features, data uses, or vendor relationships. It checks your organisation's saved privacy profile and policy commitments, then sorts the activity into one of four outcomes: PROCEED, PIA REQUIRED, DPIA MANDATORY, or STOP. It explains its reasoning, lists conditions where needed, and offers to start a full privacy impact assessment if one is required.

Great for

  • In-house privacy or legal teams screening new product features before launch
  • Product managers who want to know early whether a privacy assessment is needed
  • Teams adding a new vendor or data source that handles personal data

Skip it if

  • Final legal sign-off: the skill's output is a triage classification, not a legal opinion, and the file says it does not write the full assessment (reason: a qualified lawyer must review outcomes that affect compliance)
  • Organisations outside the configured jurisdiction: the file warns the classification may not apply where a different regime such as a different country or sector governs (reason: triggers and lawful bases vary by jurisdiction)
  • Use without setup: without a configured practice profile the skill runs only in a 'provisional' mode using generic US defaults (reason: results would not reflect the organisation's actual commitments)

Try asking

  • “/privacy-legal:use-case-triage "New feature that uses behavioral data to personalize content recommendations"”
  • “Does this need a PIA? We are onboarding a new analytics vendor that processes customer email addresses.”
  • “Privacy check on our plan to use employee badge data for office occupancy reporting.”
  • “Is this okay from a privacy perspective? We want to reuse support ticket data to train a chatbot.”
Step-by-step guide: how to use Privacy Use Case TriageInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the Apache-2.0 licence and an attribution note.

    use-case-triage.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip use-case-triage.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip use-case-triage.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the cold-start interview first so the triage uses your real trigger criteria, regulatory footprint and privacy policy commitments rather than generic defaults.
  • Describe the activity fully: data categories, data subjects, purpose, whether a vendor is involved, and whether automated decisions affect people. The skill asks follow-up questions when the description is vague.
  • Treat PROCEED and STOP results as a starting point for review, and check with your DPO or general counsel for any DPIA MANDATORY or STOP outcome.

What's inside

  • SKILL.md

Redistributed unmodified from anthropics/claude-for-legal under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.