---
title: "GDPR DPO Forcing Questions"
type: skill
id: "rezvani-skills/regulatory-compliance/gdpr-audit-prep"
category: "Legal & compliance"
publisher: "Alireza Rezvani"
license: "MIT"
source: "https://github.com/alirezarezvani/claude-skills/tree/c85b17e"
canonical: "https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/gdpr-audit-prep"
open_in_pho: "https://pho.chat/customize?item=rezvani-skills%2Fregulatory-compliance%2Fgdpr-audit-prep&utm_source=labs&utm_medium=skill-page&utm_campaign=skills-library"
---

# GDPR DPO Forcing Questions

Use before a GDPR review, post-breach audit or DPA investigation.

Source: Alireza Rezvani (MIT), copied at a pinned commit. Free to use. Part of the Phở Skills library (https://labs.pho.chat/en/skills).
Skill set: Regulatory & compliance audits (https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance.md).

## What it covers
- When to Run
- The Six DPO Questions
  - 1. Show me the Article 30 RoPA — with last-updated date.
  - 2. For this processing activity, what's the lawful basis under Article 6?
  - 3. For high-risk processing, where's the DPIA per Article 35?
  - 4. Show me a DSAR from the last 30 days — and the response timing.
  - 5. Show me Transfer Impact Assessments for the largest non-EU transfers.
  - 6. Show me the breach log per Article 33(5) — all breaches, not just notifiable ones.
- Workflow
- Output Format
- Routing
- Related

## Other skills in this set
- [FDA QSR Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/fda-qsr-audit-prep.md): Use before an FDA inspection, QMSR internal audit or Form 483 response.
- [ISO 13485 QMS Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/iso13485-audit-prep.md): Use before an ISO 13485 internal audit or DHF closure.
- [ISO 27001 ISMS Audit Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/iso27001-audit-prep.md): Use before an ISO 27001 internal, surveillance or stage 1 audit.
- [SOC 2 Type II Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/soc2-audit-prep.md): Use before or during a SOC 2 Type II observation period.
- [EU AI Act Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/ai-act-readiness.md): EU AI Act readiness for an AI system. Use when launching AI in the EU, at AI intake.
- [AIMS ISO 42001 Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/aims-audit.md): ISO 42001 AI readiness check. Use before a stage 1 or internal audit.
- [Compliance Officer Forcing Questions](https://labs.pho.chat/en/skills/rezvani-skills/regulatory-compliance/compliance-readiness.md): Use before adding a framework or planning the annual audit calendar.

## Use it
- In Phở: open https://pho.chat/customize?item=rezvani-skills%2Fregulatory-compliance%2Fgdpr-audit-prep&utm_source=labs&utm_medium=skill-page&utm_campaign=skills-library and press Try, or add it so Phở loads it whenever a request matches. Phở works with your own API key (OpenAI, Anthropic, Google and others).
- Full instructions (original SKILL.md, unchanged): https://labs.pho.chat/skills/raw/rezvani-skills/regulatory-compliance/skills/gdpr-audit-prep/SKILL.md
- Original files: https://github.com/alirezarezvani/claude-skills/tree/c85b17e (MIT).
- Full machine-readable index: https://labs.pho.chat/skills.json