# Eu Regulatory Router

> Identify which EU regulations (AI Act, NIS2, DORA, GDPR) apply to your system based on sector, data types, and entity size, then route to the right compliance skill.

- **Type:** Skill
- **Install:** `agentstack add skill-builderced-agent-skills-eu-regulatory-router`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [BuilderCed](https://agentstack.voostack.com/s/builderced)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [BuilderCed](https://github.com/BuilderCed)
- **Source:** https://github.com/BuilderCed/agent-skills/tree/main/skills/compliance/eu-regulatory-router
- **Website:** https://skills.sh/BuilderCed/agent-skills

## Install

```sh
agentstack add skill-builderced-agent-skills-eu-regulatory-router
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# EU Regulatory Router

> **DISCLAIMER**: This skill provides guidance only. It does not constitute legal advice. Regulatory applicability depends on specific circumstances that require qualified legal assessment.

## When to Use

- Starting a new project and unsure which EU regulations apply
- Assessing regulatory exposure for an existing system
- Preparing for compliance audits
- When multiple regulations might overlap

## Decision Tree

### Question 1: Does your system process personal data?
- **YES** → GDPR applies. Use `gdpr-data-protection`.
- **NO** → Skip GDPR. Continue.

### Question 2: Does your system use AI/ML models?
- **YES** → AI Act likely applies. Use `eu-ai-act-compliance` to classify risk.
- **NO** → Skip AI Act. Continue.

### Question 3: Is your organization in a NIS2 sector?
Essential: Energy, transport, banking, health, water, digital infrastructure, ICT management, public admin, space.
Important: Postal, waste, chemicals, food, manufacturing, digital providers, research.
- **YES** + medium/large entity → NIS2 applies. Use `eu-nis2-compliance`.
- **NO** → Skip NIS2. Continue.

### Question 4: Is your organization a financial entity?
Banking, investment, insurance, pension, crypto, infrastructure.
- **YES** → DORA applies. Use `eu-dora-compliance`.
- **NO** → Skip DORA.

## Overlap Scenarios

| Scenario | Regulations | Priority |
|----------|-------------|----------|
| Fintech with AI chatbot | GDPR + AI Act + DORA | All three. DORA for resilience, AI Act for chatbot, GDPR for data. |
| Hospital with AI diagnostics | GDPR + AI Act + NIS2 | AI Act HIGH-RISK (health). NIS2 for cybersecurity. GDPR for patient data. |
| SaaS for SMEs (non-financial) | GDPR | Usually GDPR only. NIS2 if digital infrastructure. |
| Cloud provider | GDPR + NIS2 | NIS2 as digital infrastructure. GDPR as processor. |
| E-commerce with recommendations | GDPR + AI Act (limited risk) | GDPR for customer data. AI Act transparency for recommendations. |

## Regulatory Collision Warning

When an AI security incident occurs at a financial institution, it can trigger ALL FOUR regulations simultaneously:
- **DORA**: ICT incident reporting (4h + 72h + 1 month)
- **NIS2**: Significant incident reporting (24h + 72h + 1 month)
- **AI Act**: If AI system involved, conformity breach
- **GDPR**: If personal data affected, data breach notification (72h)

**Coordinate reporting timelines** — the strictest deadline governs.

## What This Skill Does NOT Do

- Does not provide legal certainty on regulatory applicability
- Does not handle national transposition differences
- Does not cover sector-specific regulations (e.g., MiCA for crypto beyond DORA)
- Does not replace legal counsel assessment

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [BuilderCed](https://github.com/BuilderCed)
- **Source:** [BuilderCed/agent-skills](https://github.com/BuilderCed/agent-skills)
- **License:** MIT
- **Homepage:** https://skills.sh/BuilderCed/agent-skills

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-builderced-agent-skills-eu-regulatory-router
- Seller: https://agentstack.voostack.com/s/builderced
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.