Data Protection

data-protection legal skills for Germany

Germany enforces the GDPR through one of Europe's most decentralised oversight structures — seventeen state-level data protection authorities alongside the Federal Commissioner for Data Protection and Freedom of Information (BfDI), each capable of investigating controllers and issuing fines independently. That structural complexity compounds the already dense compliance picture: organisations operating in Germany must reconcile GDPR obligations with the Bundesdatenschutzgesetz (BDSG), which tightens rules on employee data, lowers some consent thresholds, and restricts automated decision-making beyond what the regulation alone requires. The data-protection legal skills for Germany in the ThomasMore catalog are designed for exactly this layered environment, covering DPIA preparation, data-processing agreement drafting, breach notification timelines, and cross-border transfer assessments under SCCs and adequacy decisions.

Each skill is agent-ready — run directly over MCP or downloaded into your existing workflow — so a practitioner can move quickly from a client's processing inventory to a regulator-ready record of processing activities without rebuilding the analysis from scratch. The collection is useful to in-house counsel managing vendor contracts, law firms advising on enforcement response, and DPOs stress-testing a compliance programme against the BfDI's published enforcement priorities. Authors maintain these skills as German supervisory guidance and EU-level EDPB opinions develop, keeping the logic current rather than frozen at a single point in time. Filter by license or author within the ThomasMore catalog to identify what is ready to deploy on your next German data-protection matter.