Apache-2.0GeneralRegulatory
Generates structured compliance summaries assessing regulatory posture, identifying gaps, and producing prioritized remediation roadmaps across finance (SEC, FINRA), healthcare (HIPAA, FDA), environmental (EPA), and data privacy (GDPR, CCPA) sectors. Use when drafting regulatory compliance reports, audit readiness assessments, or governance documents for executives, boards, or regulators. For sector-specific depth, defer to dedicated sibling skills (environmental-regulation-summaries, hipaa-privacy-notice, fcpa-compliance-policy, etc.).
MITGeneralRegulatory
Regulatory compliance monitoring skill for tracking legal and regulatory requirements. Use when the user needs assistance with compliance calendars, regulatory tracking, audit preparation, compliance reporting, or regulatory change management. Triggers on keywords like "compliance", "regulatory", "audit", "filing deadline", "compliance calendar", "regulatory change", "compliance report", "annual report", "periodic filing".
MITGeneralArbitration
Drafts a structured settlement proposal for use in conciliation or mediation, converting a party's interests, priorities, valuation, non-monetary needs, and authorised concessions into clear conditional terms without accidentally creating a concluded settlement. Use when a user wants to make, revise, compare, or package an offer for a facilitated settlement process, including opening proposals, option packages, staged payments, reciprocal concessions, or mediator-transmitted terms. Distinct from settlement-documenter, which documents a deal after agreement rather than proposing one.
MITGeneralLife sciences
Conduct a GxP audit of computerized systems and processes. Covers audit planning, opening meetings, evidence collection, finding classification (critical/major/minor), CAPA generation, closing meetings, report writing, and follow-up verification. Use for scheduled internal audits, supplier qualification audits, pre-inspection readiness assessments, for-cause audits triggered by deviations or data integrity concerns, or periodic compliance posture reviews of validated systems.
MITGeneralLife sciences
Conduct a GxP audit of computerized systems and processes. Covers audit planning, opening meetings, evidence collection, finding classification (critical/major/minor), CAPA generation, closing meetings, report writing, and follow-up verification. Use for scheduled internal audits, supplier qualification audits, pre-inspection readiness assessments, for-cause audits triggered by deviations or data integrity concerns, or periodic compliance posture reviews of validated systems.
Apache-2.0GeneralData protection
Conducts digital forensics investigations following a personal data breach, covering evidence preservation, chain of custody documentation, log analysis, scope determination, and root cause analysis. References industry-standard tools including Splunk, ELK Stack, and Wireshark. Provides forensic workflow from initial evidence collection through final investigation report. Keywords: digital forensics, breach investigation, evidence preservation, chain of custody, root cause analysis, Splunk, ELK, Wireshark.
Apache-2.0GeneralData protection
Guides a comprehensive organisational data protection audit against key GDPR requirements including Articles 5, 24, 25, 28, 30, 32, 35, and 37. Includes 50+ control points covering principles, accountability, security, and governance. Activate when performing compliance audits, preparing for supervisory authority inspections, or assessing organisational GDPR maturity. Keywords: data protection audit, compliance audit, GDPR audit, control points, accountability.
Apache-2.0GeneralData protection
Guides the end-to-end GDPR Data Protection Impact Assessment process under Article 35, including mandatory trigger identification per Art. 35(3), DPIA content requirements per Art. 35(7), and EDPB WP248rev.01 methodology. Activate for systematic profiling, large-scale special category processing, or large-scale public monitoring. Keywords: DPIA, Article 35, impact assessment, WP248, data protection, risk assessment.
Apache-2.0GeneralData protection
Conducts structured post-breach remediation using a lessons learned framework covering root cause remediation, control gap closure, policy updates, training modifications, monitoring enhancements, and regulatory follow-up. Provides a systematic approach to preventing breach recurrence and demonstrating accountability to supervisory authorities. Keywords: post-breach, remediation, lessons learned, root cause, control gap, policy update, training.
Apache-2.0GeneralData protection
Guides the Privacy Threshold Analysis screening process to determine whether a full DPIA is required. Provides a quick-screen questionnaire, threshold criteria based on WP248rev.01, escalation triggers, and documentation requirements. Activate when evaluating new processing activities, system changes, or procurement decisions. Keywords: PTA, privacy threshold analysis, DPIA screening, quick-screen, threshold criteria, WP248, escalation triggers.
Apache-2.0GeneralContracts
Drafts enforceable confidentiality and non-disclosure agreements for corporate transactions, M&A, partnerships, and due diligence. Covers mutual and unilateral structures, defined-term confidential information, permitted disclosures, non-solicitation, standstill, return/destruction obligations, and equitable remedies. Use when drafting an NDA, confidentiality agreement, or mutual confidentiality agreement for business transactions.
MITGeneralContracts
Run a NY/NJ RPC conflicts check for a solo or small-firm practice against the firm's conflicts-check workbook whenever a new prospective client, vendor engagement, direct client, fixed-fee package sale, subcontract end-client matter, or new adverse party on an existing matter appears. Trigger on any phrasing like "run a conflicts check on X", "can I take on X", "new client X — check conflicts", "X wants to engage me", "does X conflict", or whenever the user describes a new engagement opportunity and the conflicts workbook is available — even if they don't say the word "conflict". Produces a RED/YELLOW/GREEN read, the rule analysis (1.7 / 1.9 / 1.18 / personal interests), and a ready-to-log Conflict Checks Log row.