Skip to content

v0.1.0 — initial release

Choose a tag to compare

View all tags
@obiot obiot released this 03 May 04:27
· 13 commits to main since this release
v0.1.0
e2bec39

⚠ Reference material — not legal advice. See DISCLAIMER.md before relying on any content here for compliance decisions. Always verify against the official statute and consult a qualified DPO or lawyer.

First public release of the personal-data-protection compliance skill for Claude Code and Codex CLI / Cursor / Copilot.

Tech-agnostic, organised by where in the stack each obligation lands rather than by statute section number. Engineers shouldn't need to learn statute references to ship features that comply.

Jurisdictions covered

Code Jurisdiction Statute version reflected
sg-pdpa Singapore PDPA 2012 Current as at 1 May 2026 (post-2020 Amendments)
th-pdpa Thailand PDPA B.E. 2562 (2019) Original 2019 text via PDPC Thailand English translation
id-pdp Indonesia UU PDP No. 27/2022 Original 2022 enactment (Bahasa Indonesia binding text)

Structure

  • 7 universal layer files — non-technical, architecture, data model, controls and processes, feature/UX, disclosure, operational
  • 3 jurisdictions × (README.md + statute-map.md + 7 obligation files mapping the statute to the layers)
  • 4 entry-point checklists — new-feature, new-data-field, new-vendor, breach-response
  • 2 templates — incident response runbook, PostToolUse nudge hook
  • Cross-jurisdiction comparison index — what's the same, what diverges, where the strictest rule wins

Multi-agent support

  • SKILL.md for Claude Code (auto-discovery via YAML frontmatter)
  • AGENTS.md for Codex CLI, Cursor, Copilot (mirrors SKILL.md for tools that don't read Claude's frontmatter)

Legal posture

  • MIT licence with explicit carve-out for verbatim statute text — see DISCLAIMER.md § Copyright in source materials
  • Per-jurisdiction source-copyright notices (SSO Terms of Use, PDPC Thailand, Komdigi)
  • "Reference material only — not legal advice" banner on every content file
  • DISCLAIMER, CONTRIBUTING, SECURITY aligned on a zero-liability stance with Singapore-courts dispute jurisdiction

Roadmap

v0.2 will add three more SEA jurisdictions:

  • Malaysia — PDPA 2010 with the 2024 Amendments (mandatory DPO, mandatory breach notification, data portability, raised penalties)
  • Philippines — Data Privacy Act 2012 (RA 10173) plus NPC Circulars
  • Vietnam — PDP Decree 13/2023/ND-CP (full PDP Law drafted; will re-cut on enactment)

Track via CHANGELOG.md. Contributions welcome — see CONTRIBUTING.md.

Assets 2
Loading