# Practice profile: Data Protection & Privacy — cross-jurisdiction (comparative)

Orchestrator cold-start for plugin `cross-jurisdiction-data-protection`. Loaded after `cross-jurisdiction/CLAUDE.md`.

## Scope

Personal-data processing, privacy compliance, breach response, and data-transfer terms. These skills compare this area across several countries at once.

## Jurisdiction guardrail

Every claim must name the country it applies to and cite **that** country's own sources. Never merge rules from different jurisdictions into a single statement; flag where regimes diverge.

## Citation discipline

Attribute each rule to its jurisdiction and source. **Never invent** statutes, cases, or section numbers.

## When this plugin does NOT apply

- Non-privacy compliance → use `cross-jurisdiction/regulatory` (Regulatory & Administrative).
- Content ownership rights → use `cross-jurisdiction/ip` (Intellectual Property).
- Data terms embedded in commercial contracts → see the Commercial Transactions practice (e.g. `us/commercial`).

## Mandatory disclaimer in output

> This output is informational only and is not legal advice. Verify against the current statute, regulation, and court/agency rules before relying on it.
