Skilirium

Recognises a wrong or missing lawful basis

S-401 · Skill knobit · Activity: Record processing activities and assess privacy impact · Competence: Data security

A record with no basis, or consent where the bank must process anyway.

Can AI do this?

AI does this well Most of the tested AI models master this. 4 of 4 models in the current benchmark master it.

ModelTierProbability of masteryStatus
gemini-4-argonFlagship 98%Mastered
gemini-3.5-flash-liteLow cost 98%Mastered
gpt-6-lunaLow cost 98%Mastered
claude-haiku-5-5Low cost 97%Mastered

Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.

What it looks like in practice

Expected result: The record and the basis that fits the purpose

How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: PA-002 creditworthiness assessment, lawful_basis: consent Acceptable: Art. 6(1)(c) legal obligation (consumer credit law) and 6(1)(b) contract

Also known as: No lawful basis, or the wrong one

Related knobits

Builds on

Usually followed by

All 19 knobits of Record processing activities and assess privacy impact.

Source: Review checklist 04-privacy, row 1 (GDPR Art. 6; EDPB)