Data Protection

data-protection legal skills for China

China has built one of the world's most layered data governance regimes in a short span, with the Personal Information Protection Law, the Data Security Law, and the Cybersecurity Law operating together under the oversight of the Cyberspace Administration of China — each imposing distinct obligations that a practitioner must read in combination rather than in isolation.

The data protection legal skills for China in the ThomasMore catalog are designed for exactly that multi-statute reality, covering cross-border data transfer mechanisms such as standard contracts and security assessments, personal information impact assessments, data classification requirements, and compliance gap analyses. Each skill is agent-ready, callable over MCP or available as a download, so counsel can move quickly whether they are advising a foreign company on localisation obligations or a domestic operator on handling sensitive personal information. The ThomasMore catalog organises these skills by task type, license, and author, making it straightforward to locate what a specific matter requires. As the Cyberspace Administration of China continues to issue implementing measures and guidance, open-source contributors update these skills to reflect the current regulatory position. Use the filters above to narrow by task or author and put the right capability to work immediately.