القائمة
Navigate cross-border data transfer rules — Schrems II, EU SCCs, adequacy decisions, data localization requirements for EU, US, Brazil, and other jurisdictions.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Build USSD applications for African markets — menu design, session management, multi-operator integration, and user experience patterns for feature phones.
Generate AI Act Article 50 compliant disclosure notices, metadata tags, and content marking for AI-generated text, images, audio, and video.
Analyze contracts to identify key clauses, risks, obligations, deadlines, and parties. Multi-language support with focus on French and EU commercial law.
Detect and classify technical debt in AI-generated code — patterns specific to LLM outputs, shallow implementations, missing edge cases, and accumulation signals.
Navigate French notarial acts — fee calculation (emoluments), succession, donation, SCI creation, property transfer, and regulated fee schedules.
Structure a job search for the French/European market — CV format europass, cover letter VOUS-MOI-NOUS, job evaluation scoring, interview prep STAR, salary negotiation with French conventions.
| name | data-sovereignty-patterns |
| description | Navigate cross-border data transfer rules — Schrems II, EU SCCs, adequacy decisions, data localization requirements for EU, US, Brazil, and other jurisdictions. |
| version | 1.0.0 |
| last-updated | 2026-04-22 |
| model_tested | claude-sonnet-4-6 |
| category | sovereignty |
| platforms | ["claude-code","codex","gemini-cli","cursor","copilot","windsurf","cline"] |
| language | en |
| geo_relevance | ["global","eu"] |
| priority | medium |
| dependencies | {"mcp":[],"skills":["gdpr-data-protection"],"apis":[],"data":[]} |
| update_sources | [{"url":"https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en","check_frequency":"quarterly","last_checked":"2026-04-22"}] |
| license | MIT |
DISCLAIMER: Guidance only. Cross-border data transfers require legal assessment specific to your situation.
After Schrems II (CJEU C-311/18), transferring personal data outside the EEA requires:
Countries deemed adequate by the European Commission:
| Country | Decision Date | Notes |
|---|---|---|
| UK | 2021 (renewed) | Post-Brexit, includes sunset clause |
| Japan | 2019 | Mutual adequacy |
| South Korea | 2022 | Comprehensive |
| USA | 2023 (EU-US DPF) | Data Privacy Framework, requires self-certification |
| Canada | 2001 | Commercial only (PIPEDA) |
| Switzerland | 2000 | Comprehensive |
| Israel | 2011 | Comprehensive |
| New Zealand | 2012 | Comprehensive |
| Argentina | 2003 | Comprehensive |
| Uruguay | 2012 | Comprehensive |
For adequate countries: transfer freely, no additional mechanism needed.
For non-adequate countries, use EU-approved SCC templates:
| Module | Scenario |
|---|---|
| Module 1 | Controller → Controller |
| Module 2 | Controller → Processor (most common: you → cloud provider) |
| Module 3 | Processor → Sub-processor |
| Module 4 | Processor → Controller |
Required: Transfer Impact Assessment (TIA) evaluating recipient country laws.
For intra-group transfers within multinational companies. Complex, expensive, long approval (~18 months).
| Region | Requirement | Affected Data |
|---|---|---|
| EU/EEA | Transfer mechanism required for export | Personal data (GDPR) |
| Russia | Localization of Russian citizens' data | Personal data |
| China | Security assessment for cross-border transfers | Personal data + "important data" |
| India | Proposed localization (DPDP Act 2023) | Sensitive personal data |
| Brazil | Similar to GDPR (LGPD) | Personal data, adequacy or SCCs |
| Saudi Arabia | Localization for certain sectors | Government, health, finance |
| Turkey | Explicit consent or BCR for transfers | Personal data |
Deploy all infrastructure in EU. Simplest compliance.
| AI Service | Data Flow | Mechanism Needed |
|---|---|---|
| Claude API (Anthropic) | EU → US | EU-US DPF (if Anthropic self-certified) or SCCs |
| OpenAI API | EU → US | EU-US DPF or SCCs |
| Ollama (local) | No transfer | None (local processing) |
| Azure OpenAI (EU) | EU → EU | None (intra-EEA) |
| Google Vertex (EU) | EU → EU | None (if EU region selected) |
