Data Protection

data-protection legal skills for France

France sits at the intersection of two overlapping data-protection regimes: the GDPR, which applies directly as EU law, and the French loi Informatique et Libertés as amended to align with it, enforced by the CNIL — one of Europe's most active national supervisory authorities, known for issuing substantial fines and publishing detailed guidance on cookies, AI systems, and cross-border transfers. Practitioners advising French controllers and processors face a workload that spans DPIA drafting, records of processing activities, data-breach notification timelines, and the negotiation of data-processing agreements — each with its own procedural expectations under CNIL doctrine. The data-protection legal skills for France in the ThomasMore catalog are built for exactly that dual-layer reality, covering both the directly applicable GDPR requirements and the French-specific provisions that sit alongside them.

Every skill in this collection is agent-ready, meaning your AI agent can execute it over MCP or you can pull it down as a file and integrate it into an existing workflow without rebuilding logic from scratch. Tasks covered include screening processing activities against lawful-basis requirements, generating CNIL-compliant privacy notices, and mapping controller-processor relationships for multi-entity structures common in French corporate groups. The ThomasMore catalog lets you filter by license or author so you can match a skill to the sensitivity of a client matter or a preferred contribution model. If your work touches advertising technology, health data governed under the French public health code, or intra-group transfers to non-adequate countries, use the filters above to surface the skills most relevant to your caseload.