Data Protection

data-protection legal skills for United States

Unlike the EU's single omnibus framework, data protection law in the United States is a patchwork: sector-specific federal rules such as HIPAA for health information and COPPA for children's data sit alongside a growing roster of state comprehensive privacy statutes — California's CCPA and CPRA being the most litigated — with enforcement divided among the FTC, state attorneys general, and sector regulators. That complexity makes preparation and consistency genuinely difficult, especially for counsel advising businesses that operate across multiple states with conflicting opt-out, data-mapping, and response-window requirements. The agent-ready legal skills for US data protection in the ThomasMore catalog are built around exactly those pressure points, covering privacy notice drafting, consumer rights request workflows, breach notification timelines, vendor contract clauses, and compliance gap analysis across the federal and state layers.

Each skill runs over MCP or downloads as a reusable file, so it drops into matter management, contract review, or incident response workflows without rebuilding logic from scratch. The collection is practical for in-house privacy teams, outside counsel handling multi-state rollouts, and practices advising on FTC enforcement risk or state AG investigations. As new state statutes come into force and federal rulemaking continues to develop, the open-source contributions in the ThomasMore catalog are maintained to track those shifts. Use the filters above to narrow by license, author, or specific state regime and surface the skill your current matter needs.