data-protection

data-protection legal skills by jurisdiction

Data protection work is defined by the tension between rapidly evolving regulatory requirements and the need for consistent, jurisdiction-specific compliance — a DPA investigation in Germany, a cross-border data transfer impact assessment under the GDPR, and a breach notification to a national authority each demand a different set of steps, timelines, and substantive rules. The data protection legal skills assembled in the ThomasMore catalog address that breadth: drafting privacy notices and data processing agreements, mapping lawful bases for processing, conducting data protection impact assessments, and building incident response workflows across dozens of regulatory regimes. Every skill is agent-ready, meaning an AI agent can execute the underlying task — running over MCP or downloaded as a file — without requiring practitioners to rebuild the logic from scratch for each matter.

Coverage spans frameworks from the GDPR and its national implementation laws through sector-specific and regional regimes, reflecting the reality that a single multinational client may face overlapping obligations across Europe, Asia-Pacific, Latin America, and beyond. Authors maintain these skills as regulators update guidance, adequacy decisions shift, and enforcement priorities change, so the catalog reflects current standards rather than yesterday's rules. The collection is useful across the full spectrum of advisory work — counsel advising data controllers or processors, those handling regulatory investigations, and those advising on international data flows will each find targeted capabilities here. Filter by jurisdiction to bring the right regulatory framework into focus for the matter in front of you.