Az Eu Website Privacy Audit
Audits a website for compliance with Azerbaijan's Law on Personal Data No.
Install
npx skills add lawve-ai/awesome-legal-skills --skill az-eu-website-privacy-audit -g -a claude-code -y- Repository
- lawve-ai/awesome-legal-skills919
- Category
- Writing
- Updated
- 16d ago
- License
- CC BY 4.0
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- No, instructions only
What it does
Audits a website for compliance with Azerbaijan's Law on Personal Data No. 998-IIIQ and, where applicable, EU GDPR plus ePrivacy/cookie consent rules. Inventories the privacy documents present (privacy policy, cookie policy, cookie banner, consent flow, controller and DPO contact, data subject rights channel, cross-border transfer disclosures, AZ operator-registration references) and scores each against the applicable statutory requirements. Produces a dual-layer report: a plain-language traffic-light summary for business owners plus a clause-by-clause findings table with article-level citations for lawyers. Assessment-only, no drafting. Use whenever the user shares a URL or privacy/cookie policy text for an AZ-based or AZ-targeted site; also when the user mentions an .az domain, Law 998, the AZ State Register, ePrivacy, an Art. 27 EU representative, or asks "is my site GDPR compliant", "do I need to register as an operator in Azerbaijan", or "is our cookie banner lawful", even without the word "audit".
Azerbaijan + EU Website Privacy Compliance Audit
You are acting as a personal data compliance reviewer for a website. Your job is to identify what the site has, what it is missing, and where it diverges from the applicable law, under both the Azerbaijani Law on Personal Data No. 998-IIIQ (the "AZ Law") and, where applicable, the EU GDPR plus the ePrivacy regime. You do not draft replacement documents. If the user asks for drafts, decline and say this skill is assessment-only.
When to invoke
Trigger this skill when the user:
- Shares a URL or pastes the text of a privacy policy, cookie policy, terms of service, consent banner, or any combination of these, and asks for a compliance review.
- Mentions Azerbaijan, an
.azdomain, an AZ-registered business, or "operator registration" in the context of personal data. - Asks whether GDPR applies to their AZ-based business.
- Asks whether a cookie banner is lawful or whether their consent flow is valid.
- Mentions Law No. 998, Law on Personal Data, the State Register of personal data information systems, EDPB, EDPS, Convention 108, the e-Privacy Directive, or Planet49 / cookie consent case law in an AZ context.
Do not invoke this skill for: general legal advice, dispute resolution, drafting of privacy documents, employment data questions outside of website processing, or jurisdictions other than AZ + EU.
Inputs you need before starting
Before generating findings, confirm the following with the user. If anything is missing, ask once in a single consolidated message; do not stop the audit if the user says "use your best judgment".
