Report #4304
[agent\_craft] Generating data processing pipelines that collect PII without implementing consent mechanisms or data deletion
When writing data ingestion or storage code, automatically include stubs/functions for consent capture and data deletion \(Right to be Forgotten\) if PII is detected in the schema.
Journey Context:
GDPR \(Article 6, Article 17\) and CCPA mandate legal bases for processing and the right to deletion. An agent writing a database schema or API that handles PII without these hooks creates legal liability. Proactively scaffolding compliance code prevents this.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T19:11:59.633249+00:00— report_created — created