Skip to content

v0.3.0

Choose a tag to compare

@KevinRabun KevinRabun released this 10 Feb 15:43
· 8 commits to main since this release

🎉 What's New in v0.3.0

This release introduces controller/processor role classification — helping developers and technical PMs understand their GDPR role obligations.

✨ New MCP Tools

Tool Description
assess_controller_processor_role Determine if your service acts as a controller, processor, joint controller, or both
get_role_obligations Get GDPR obligations specific to your role with optional Azure implementation guidance
analyze_code_for_role_indicators Detect role-indicating patterns in source code (consent collection, instruction handling, etc.)
generate_dpa_checklist Create Art. 28(3) compliant Data Processing Agreement checklists
get_role_scenarios Industry-specific examples for healthcare, finance, and technology sectors

📋 GDPR Coverage

  • Art. 4(7) — Controller definition
  • Art. 4(8) — Processor definition
  • Art. 26 — Joint controllers
  • Art. 28 — Processor obligations and DPA requirements

🔍 Role Classification Features

  • Text-based assessment: Analyzes service descriptions to identify controller/processor indicators
  • Code pattern detection: Identifies role indicators in Python, TypeScript, C#, Java, and Go
  • Scoring system: Weighted scoring for purpose determination, instruction-following, and shared decision-making
  • DPA generation: Complete Art. 28(3) checklist with all required contractual elements

🧪 Quality Assurance

  • 49 unit tests for role classifier
  • 99 adversarial judge tests for role classification
  • 537 total judge tests (all passing)
  • 343 pytest tests (all passing)

📦 Installation

pip install gdpr-shift-left-mcp==0.3.0

## What's Changed
* Feature/controller processor classification by @KevinRabun in https://github.com/KevinRabun/GDPRShiftLeftMCP/pull/11


**Full Changelog**: https://github.com/KevinRabun/GDPRShiftLeftMCP/compare/v0.2.0...v0.3.0