Data Protection

data-protection legal skills for European Union

The GDPR sits at the centre of EU data protection practice, but the real complexity for practitioners lies in navigating the interplay between that Regulation, the ePrivacy Directive, the AI Act's data-governance obligations, and the enforcement priorities of each Member State's national supervisory authority — all of which can bear on a single data-processing arrangement. The data protection legal skills for the European Union in the ThomasMore catalog are built for exactly that multi-layered work: mapping lawful bases under Articles 6 and 9, drafting data processing agreements and records of processing activities, conducting transfer impact assessments for third-country flows, and stress-testing controller–processor arrangements against the European Data Protection Board's latest guidance.

Each skill is agent-ready, callable over MCP or available as a download, so your team can run a DPIA, generate a breach-notification checklist timed to the 72-hour window, or screen a vendor contract without leaving your existing workflow. The ThomasMore catalog organises these skills so that compliance counsel, privacy engineers, and litigation teams advising on regulatory investigations can all find what a specific matter demands. Open-source contributions are maintained to track EDPB opinions, CJEU rulings, and the shifting enforcement patterns of authorities such as the Irish DPC, the CNIL, or the German Datenschutzkonferenz. If cross-border processing, cookie consent, or AI-system governance is where your current instruction sits, filter by license or author to reach the capability you need.