Prompt

Implement GDPR compliance for data systems.

<personal_data>
{types of personal data collected}
</personal_data>

<data_flows>
{how data moves through systems}
</data_flows>

<current_gaps>
{known compliance gaps}
</current_gaps>

Implement:
1. Data inventory
2. Consent management
3. Right to deletion
4. Data portability
5. Audit logging
6. Privacy by design