LabscoMCP early access ↗
CSOAI-ORGMCP SERVER

GDPR Compliance AI MCP

DPIA automation, Article 30 records, Article 22 automated-decision audit, and the data subject request workflow.

by CSOAI-ORG ↗Regulatory Compliance & AI GovernanceCommunity

LABSCO SUMMARY

Lawful basis first, DPIA second.

Three of the six tools run in the order the regulation does: what is the processing, what permits it, and what assessment does that combination require. That sequencing is most of the value — a DPIA generated without a settled lawful basis is a document you will rewrite.

What it is

A Python server for GDPR work: data protection impact assessments, Article 30 records of processing, an Article 22 audit for automated decision-making, and the data subject request workflow. It is aimed at the recurring paperwork rather than at one-off legal advice.

What you get

Six tools, listed in the repository's .mcp.json. Three of them chain: classify_processing, lawful_basis_assessment and dpia_generator classify the processing, establish the lawful basis, then generate the DPIA that follows from both. The other three are rights_request_handler, breach_notification and crosswalk_to_eu_ai_act.

Requirements

Install with pip install gdpr_compliance_ai_mcp. Your client then starts it with the gdpr_compliance_ai_mcp command, over stdio. For pay-per-call, set MEOK_PAYG_KEY to a top-up token — each call deducts £0.05 by default, and MEOK_PAYG_RATE_GBP changes the rate.

Setup effort

One command — pip install gdpr_compliance_ai_mcp