v0.3.0
🎉 What's New in v0.3.0
This release introduces controller/processor role classification — helping developers and technical PMs understand their GDPR role obligations.
✨ New MCP Tools
| Tool | Description |
|---|---|
assess_controller_processor_role |
Determine if your service acts as a controller, processor, joint controller, or both |
get_role_obligations |
Get GDPR obligations specific to your role with optional Azure implementation guidance |
analyze_code_for_role_indicators |
Detect role-indicating patterns in source code (consent collection, instruction handling, etc.) |
generate_dpa_checklist |
Create Art. 28(3) compliant Data Processing Agreement checklists |
get_role_scenarios |
Industry-specific examples for healthcare, finance, and technology sectors |
📋 GDPR Coverage
- Art. 4(7) — Controller definition
- Art. 4(8) — Processor definition
- Art. 26 — Joint controllers
- Art. 28 — Processor obligations and DPA requirements
🔍 Role Classification Features
- Text-based assessment: Analyzes service descriptions to identify controller/processor indicators
- Code pattern detection: Identifies role indicators in Python, TypeScript, C#, Java, and Go
- Scoring system: Weighted scoring for purpose determination, instruction-following, and shared decision-making
- DPA generation: Complete Art. 28(3) checklist with all required contractual elements
🧪 Quality Assurance
- 49 unit tests for role classifier
- 99 adversarial judge tests for role classification
- 537 total judge tests (all passing)
- 343 pytest tests (all passing)
📦 Installation
pip install gdpr-shift-left-mcp==0.3.0
## What's Changed
* Feature/controller processor classification by @KevinRabun in https://github.com/KevinRabun/GDPRShiftLeftMCP/pull/11
**Full Changelog**: https://github.com/KevinRabun/GDPRShiftLeftMCP/compare/v0.2.0...v0.3.0