Regulatory Compliance Check

Use this skill when

• Assessing compliance readiness for GDPR, HIPAA, SOC2, or PCI-DSS
• Building control checklists and audit evidence
• Designing compliance monitoring and reporting

Do not use this skill when

• You need legal counsel or formal certification
• You do not have scope approval or access to required evidence
• You only need a one-off security scan

Context

Requirements

Instructions

• Clarify goals, constraints, and required inputs.
• Apply relevant best practices and validate outcomes.
• Provide actionable steps and verification.
• If detailed examples are required, open

  resources/implementation-playbook.md

  .

Safety

• Avoid claiming compliance without a formal audit.
• Protect sensitive data and limit access to audit artifacts.

Output Format

1. Compliance Assessment: Current compliance status across all applicable regulations
2. Gap Analysis: Specific areas needing attention with severity ratings
3. Implementation Plan: Prioritized roadmap for achieving compliance
4. Technical Controls: Code implementations for required controls
5. Policy Templates: Privacy policies, consent forms, and notices
6. Audit Procedures: Scripts for continuous compliance monitoring
7. Documentation: Required records and evidence for auditors
8. Training Materials: Workforce compliance training resources

Resources

• resources/implementation-playbook.md

  for detailed patterns and examples.