Data protection legal-AI skills in 🇬🇧 United Kingdom

11 legal AI skills for data protection in United Kingdom.

Building a Universal DSAR Intake System

Apache-2.0United KingdomData protection

Builds a multi-channel DSAR intake system supporting web form, email, phone, and in-person requests with identity verification tiers, automated routing logic, SLA tracking, and response generation. Activate for DSAR intake, rights request portal, multi-channel intake, SLA tracking, request management queries.

FOI Data Request

MITUnited KingdomData protection

Drafts a Freedom of Information request specifically targeting datasets, databases, or digital records — written to maximise the chance of receiving complete, machine-readable data rather than summary PDFs or partial tables.

GDPR Note Writer

MITUnited KingdomData protection

Drafts a GDPR compliance note for a specific piece of journalistic content or data collection activity — documenting the lawful basis for processing personal data, what data is held, how long it is retained, and who has access.

GDPR Privacy Policy & Compliance Document Generator

MITUnited KingdomData protection

Generate UK/EU GDPR compliance documents — privacy policies, cookie policies, DPIAs, ROPA, DSAR responses, data breach notifications, and consent forms. Use when a business needs GDPR documentation, data protection policies, or privacy compliance.

/legal-clinic-uk:draft

Apache-2.0United KingdomData protection

First draft of a common UK clinic document — practice-area templates (ET1 claim narratives, housing possession defences, protective injunction applications, demand letters, asylum statements of evidence), jurisdiction-aware formatting for England & Wales / Scotland / Northern Ireland, explicitly a starting point requiring student analysis and supervising solicitor/barrister review. Use when a student needs a first draft of a claim, defence, letter, petition, statement, or other clinic document.

Legal Risk Checker

MITUnited KingdomData protection

Reviews a story brief, draft article, or broadcast script and flags potential legal risks — including defamation, privacy, contempt of court, and data protection — so you know what to check before publication.

/policy-monitor

Apache-2.0United KingdomData protection

Keep the UK privacy notice current with practice. Two modes: sweep of saved DPIAs, DPA reviews, and triage results to find policy drift; or direct query for a proposed new practice. Watches for ICO enforcement notices and guidance updates. Use when the user asks "does our notice cover this", "we want to start doing X — does the notice need updating", "run the policy monitor", "privacy notice sweep", or wants to find where the privacy notice no longer matches what the team actually does.

/reg-gap-analysis

Apache-2.0United KingdomData protection

Diff a new or changed UK regulation, ICO guidance, or enforcement development against current privacy notice and practice — outputs a gap list and a remediation plan with owners and dates. Use when new ICO guidance drops, a UK data-protection regulation changes, the user asks "does [regulation] affect us", "gap analysis for [statute]", "compliance check against [ICO guidance]", "UK GDPR reform — do we need to change anything", or pastes regulatory text or an ICO announcement.

UK Canned Responses Skill (England & Wales)

Apache-2.0United KingdomData protection

Generate templated responses for common legal inquiries under English law (England & Wales). Covers DSARs (UK GDPR), disclosure/litigation holds (CPR), privacy inquiries, vendor questions, NDA requests, witness summons/legal process, and insurance notifications. Identifies when situations require individualised solicitor attention.

UK online legal texts

MITUnited KingdomData protection

Use when writing, reviewing, or fixing legally required texts for a UK website, webshop, app, or newsletter — website disclosures, privacy notice, cookie banner, terms and conditions, cancellation notice, complaints and ADR information, accessibility statement — or when asked whether a UK online presence is legally compliant. Also use when an EU, German, or US legal template is about to be reused for the UK, when personal data processing starts, or before a site goes live.

/use-case-triage

Apache-2.0United KingdomData protection

Quickly determine whether a UK processing activity needs a DPIA, a mandatory Art.35 DPIA, or can proceed — surfaces lawful basis issues, Children's Code checks, PECR implications, and privacy notice conflicts. Use when the user asks "does this need a DPIA", "triage this feature", "privacy check on X", "is this okay from a UK privacy perspective", or describes a new data processing activity, product feature, or vendor relationship.

Data protection legal-AI skills in United Kingdom · ThomasMore AI