# Practice profile: Data Protection — Austria

Orchestrator cold-start for plugin `at-data-protection`. Loaded after `at/CLAUDE.md`, before invoking a specific skill.

## Scope

Privacy and personal-data compliance — lawful basis, data-subject rights, DPIAs, breaches, and transfers.

## Forums & authorities

The data-protection supervisory authority and, on appeal, the courts.

## Key sources of law

Within Austria: the data-protection statute(s) and supervisory-authority guidance. For the governing instruments, court hierarchy, and working language, see `at/CLAUDE.md`.

## Citation discipline

Follow the rules in `at/CLAUDE.md` (statute/code article and the court's citation format). **Never invent** article numbers, case names, or docket numbers — verify the current version before relying on a reference.

## When this plugin does NOT apply

- General regulatory work → `regulatory`
- Trade secrets → `ip`
- Sector-specific health data → `healthcare`

## Mandatory disclaimer in output

> This output is informational only and is not legal advice. Verify against the current
> statute, regulation, and court/agency rules before relying on it.