Data Protection

data-protection legal skills for CROSS-JURISDICTION

Cross-border data flows sit at the intersection of multiple, often conflicting legal regimes: the GDPR and EU supervisory authority decisions, national implementations that diverge in scope and remedy, sector-specific rules, and adequacy frameworks that can be withdrawn at short notice. A transfer impact assessment that works for a UK-to-EU transfer looks materially different from one covering an EU-to-US transfer under the EU–US Data Privacy Framework, and different again for flows into jurisdictions without an adequacy decision. The data protection legal skills for cross-jurisdiction matters in the ThomasMore catalog are built around that operational reality — mapping transfer mechanisms, drafting standard contractual clauses and addenda, screening processor agreements, and assembling breach notification timelines that account for multiple lead authority deadlines simultaneously.

Each skill is agent-ready, callable over MCP or available as a download, so counsel handling a multinational incident or a global vendor review can run the relevant capability without rebuilding the analysis from scratch. The ThomasMore catalog organises these tools by jurisdiction, license, and author, making it straightforward to stack a country-specific skill alongside a cross-jurisdiction one when a matter demands both layers. Because data protection law changes fast — new guidance from supervisory authorities, revised standard contractual clauses, evolving adequacy decisions — open-source contributions here are maintained with that velocity in mind. Use the jurisdiction filter above to anchor these cross-border data protection legal skills to the specific national regime your next matter actually touches.