Regulatory Map
Map all applicable regulations for "$ARGUMENTS". Identify relevant laws and requirements by jurisdiction, industry, and data type, then assess current compliance status.
Note: AI-generated legal content does not constitute legal advice. Consult a qualified attorney.
Prerequisites
None — this is a Phase 0 Assess skill.
Process
Identify applicable regulations:
- Use WebSearch to find regulations relevant to "$ARGUMENTS"
- Consider the business model, industry, geography, and data handling practices
- Include both primary regulations and subsidiary rules or guidance
Map by jurisdiction:
- EU — GDPR, ePrivacy Directive, Digital Services Act, AI Act
- US federal — FTC Act, CAN-SPAM, COPPA, HIPAA, SOX, CCPA enforcement
- US state-specific — CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), etc.
- UK — UK GDPR, Data Protection Act 2018, Online Safety Act
- Other jurisdictions — as applicable to the business
Map by industry:
- Healthcare — HIPAA, HITECH, state health privacy laws
- Finance — SOX, Dodd-Frank, PCI DSS, state money transmitter laws
- Technology — software licensing, open source compliance, export controls
- General — GDPR, consumer protection, advertising standards
Map by data type:
- Personal data — general PII under GDPR, CCPA
- Health data — PHI under HIPAA, health data under GDPR
- Financial data — payment data under PCI DSS, financial records under SOX
- Children's data — COPPA, Age Appropriate Design Code
Create regulation matrix:
- Rows: each applicable regulation
- Columns: key requirements, applicable jurisdiction, data types covered, current compliance status
- Rate compliance status: compliant / partially compliant / non-compliant / unknown
Identify highest-priority compliance gaps:
- Regulations where status is non-compliant with high enforcement risk
- Upcoming regulatory deadlines or new laws taking effect
- Areas where multiple regulations overlap with conflicting requirements
Write the artifact to .metapowers/legal/$ARGUMENTS/00-assess.md with heading:
Regulatory Map
Include sections:
- Applicable Regulations — complete list with brief descriptions
- Jurisdiction Map — regulations organized by jurisdiction
- Industry Requirements — industry-specific regulatory obligations
- Data Type Matrix — which regulations apply to which data types
- Compliance Status Matrix — current status for each regulation
- Priority Gaps — highest-risk compliance gaps requiring action
Output
The regulatory map written to .metapowers/legal/$ARGUMENTS/00-assess.md. Present a summary to the user highlighting:
- Total number of applicable regulations identified
- Current compliance status breakdown (compliant / partial / non-compliant)
- Top compliance gaps requiring immediate attention
1---2name: regulatory-map3description: Map applicable regulations by jurisdiction, industry, and data type4---56# Regulatory Map78Map all applicable regulations for "$ARGUMENTS". Identify relevant laws and requirements by jurisdiction, industry, and data type, then assess current compliance status.910> **Note:** AI-generated legal content does not constitute legal advice. Consult a qualified attorney.1112## Prerequisites1314None — this is a Phase 0 Assess skill.1516## Process17181. **Identify applicable regulations:**19 - Use WebSearch to find regulations relevant to "$ARGUMENTS"20 - Consider the business model, industry, geography, and data handling practices21 - Include both primary regulations and subsidiary rules or guidance22232. **Map by jurisdiction:**24 - **EU** — GDPR, ePrivacy Directive, Digital Services Act, AI Act25 - **US federal** — FTC Act, CAN-SPAM, COPPA, HIPAA, SOX, CCPA enforcement26 - **US state-specific** — CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), etc.27 - **UK** — UK GDPR, Data Protection Act 2018, Online Safety Act28 - **Other jurisdictions** — as applicable to the business29303. **Map by industry:**31 - **Healthcare** — HIPAA, HITECH, state health privacy laws32 - **Finance** — SOX, Dodd-Frank, PCI DSS, state money transmitter laws33 - **Technology** — software licensing, open source compliance, export controls34 - **General** — GDPR, consumer protection, advertising standards35364. **Map by data type:**37 - **Personal data** — general PII under GDPR, CCPA38 - **Health data** — PHI under HIPAA, health data under GDPR39 - **Financial data** — payment data under PCI DSS, financial records under SOX40 - **Children's data** — COPPA, Age Appropriate Design Code41425. **Create regulation matrix:**43 - Rows: each applicable regulation44 - Columns: key requirements, applicable jurisdiction, data types covered, current compliance status45 - Rate compliance status: compliant / partially compliant / non-compliant / unknown46476. **Identify highest-priority compliance gaps:**48 - Regulations where status is non-compliant with high enforcement risk49 - Upcoming regulatory deadlines or new laws taking effect50 - Areas where multiple regulations overlap with conflicting requirements51527. **Write the artifact** to `.metapowers/legal/$ARGUMENTS/00-assess.md` with heading:5354 ## Regulatory Map5556 Include sections:57 - **Applicable Regulations** — complete list with brief descriptions58 - **Jurisdiction Map** — regulations organized by jurisdiction59 - **Industry Requirements** — industry-specific regulatory obligations60 - **Data Type Matrix** — which regulations apply to which data types61 - **Compliance Status Matrix** — current status for each regulation62 - **Priority Gaps** — highest-risk compliance gaps requiring action6364## Output6566The regulatory map written to `.metapowers/legal/$ARGUMENTS/00-assess.md`. Present a summary to the user highlighting:67- Total number of applicable regulations identified68- Current compliance status breakdown (compliant / partial / non-compliant)69- Top compliance gaps requiring immediate attention
bromso