Legal Compliance Skill
Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.
Core Principle
Legal work demands precision. Every clause, citation, and compliance check protects against real-world consequences. The standard is accuracy, not speed.
Legal Research
Primary Sources (Binding Authority)
| Source |
Scope |
Example |
| Statutes |
Legislative law |
26 U.S.C. § 501(c)(3) |
| Regulations |
Agency rules |
45 C.F.R. § 164.502 (HIPAA) |
| Case Law |
Court opinions |
Marbury v. Madison, 5 U.S. 137 (1803) |
| Constitutional |
Foundational law |
U.S. Const. amend. XIV |
Secondary Sources (Persuasive)
- Legal treatises and hornbooks
- Law review articles
- Restatements of the Law
- Legal encyclopedias (Am. Jur., C.J.S.)
Citation Format (Bluebook)
Case: Party v. Party, Volume Reporter Page (Court Year)
Statute: Title Source § Section (Year)
Regulation: Volume C.F.R. § Section (Year)
AI guardrail: Never fabricate case citations. Always verify case name, volume, reporter, page, court, and year against a legal database.
Contract Analysis
Key Contract Elements
- Parties — Who is bound?
- Consideration — What is exchanged?
- Terms — Duration, renewal, termination triggers
- Representations & Warranties — What each party guarantees
- Indemnification — Who bears risk of loss?
- Limitation of Liability — Caps on damages
- Governing Law — Which jurisdiction's law applies
- Dispute Resolution — Litigation vs. arbitration vs. mediation
Red Flag Checklist
| Red Flag |
Risk |
Action |
| Unlimited liability |
Uncapped exposure |
Negotiate cap |
| Auto-renewal without notice |
Lock-in |
Add notice period |
| Broad indemnification |
Asymmetric risk |
Narrow scope |
| Non-compete > 2 years |
Enforceability risk |
Reduce duration |
| Unilateral amendment rights |
Loss of control |
Require mutual consent |
Contract Review Tracker
{
"contract": "SaaS Agreement v2.1",
"counterparty": "Vendor Inc.",
"effective_date": "2026-05-01",
"review_status": "in_progress",
"issues": [
{
"section": "7.2",
"clause": "Limitation of Liability",
"finding": "Cap excludes gross negligence carve-out",
"severity": "high",
"recommendation": "Add carve-out for gross negligence and willful misconduct",
"resolved": false
},
{
"section": "12.1",
"clause": "Auto-renewal",
"finding": "30-day notice period too short",
"severity": "medium",
"recommendation": "Negotiate to 90 days",
"resolved": true
}
]
}
Regulatory Compliance Frameworks
Cross-Industry
| Framework |
Domain |
Key Requirements |
| GDPR |
Data privacy (EU) |
Consent, right to erasure, DPO, 72hr breach notification |
| CCPA/CPRA |
Data privacy (CA) |
Opt-out of sale, right to delete, annual risk assessments |
| SOX |
Financial reporting |
Internal controls, CEO/CFO certification, audit trail |
| ADA |
Accessibility |
Reasonable accommodation, website accessibility |
Industry-Specific
| Framework |
Industry |
Focus |
| HIPAA |
Healthcare |
PHI protection, minimum necessary, BAAs |
| PCI-DSS |
Payments |
Cardholder data, encryption, access controls |
| FERPA |
Education |
Student records, directory information |
| GLBA |
Financial |
Customer financial privacy, safeguards |
| COPPA |
Children's data |
Parental consent, data minimization |
Intellectual Property
IP Type Quick Reference
| Type |
Protects |
Duration |
Registration |
| Copyright |
Original creative works |
Life + 70 years |
Automatic (registration strengthens) |
| Trademark |
Brand identifiers |
Indefinite (with use) |
Optional but recommended |
| Patent |
Inventions/processes |
20 years (utility) |
Required |
| Trade Secret |
Confidential business info |
Indefinite (if secret) |
No registration; protect via NDA |
AI-Generated Content IP Considerations
- Copyright Office position: AI-generated content without human authorship is not copyrightable
- Works with significant human creative input may qualify
- Always document the human creative contribution in the process
Legal Document Drafting
Structure of a Legal Memorandum
- Question Presented — The specific legal issue
- Short Answer — Direct conclusion
- Statement of Facts — Relevant facts only
- Discussion — IRAC analysis (Issue, Rule, Application, Conclusion)
- Conclusion — Recommendation with confidence level
Plain Language Principles
- Avoid legalese where clarity serves the reader
- Define terms on first use
- Use active voice for obligations ("Licensor shall deliver" not "delivery shall be made")
- One concept per sentence in critical provisions
Compliance Monitoring
Compliance Program Elements
- Policies & Procedures — Written, accessible, current
- Training — Role-based, annual, documented
- Monitoring — Regular audits and spot checks
- Reporting — Whistleblower channels, incident response
- Enforcement — Consistent disciplinary actions
- Documentation — Retain records per retention schedule
Retention Schedule Guidelines
| Document Type |
Typical Retention |
| Contracts |
Life of agreement + 6 years |
| Tax records |
7 years |
| Employment records |
7 years post-termination |
| Corporate minutes |
Permanent |
| Litigation hold |
Until hold lifted |
1---2name: legal-compliance3description: Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.4---56# Legal Compliance Skill78> Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.910## Core Principle1112Legal work demands precision. Every clause, citation, and compliance check protects against real-world consequences. The standard is accuracy, not speed.1314## Legal Research1516### Primary Sources (Binding Authority)17| Source | Scope | Example |18|--------|-------|---------|19| **Statutes** | Legislative law | 26 U.S.C. § 501(c)(3) |20| **Regulations** | Agency rules | 45 C.F.R. § 164.502 (HIPAA) |21| **Case Law** | Court opinions | *Marbury v. Madison*, 5 U.S. 137 (1803) |22| **Constitutional** | Foundational law | U.S. Const. amend. XIV |2324### Secondary Sources (Persuasive)25- Legal treatises and hornbooks26- Law review articles27- Restatements of the Law28- Legal encyclopedias (Am. Jur., C.J.S.)2930### Citation Format (Bluebook)31```32Case: Party v. Party, Volume Reporter Page (Court Year)33Statute: Title Source § Section (Year)34Regulation: Volume C.F.R. § Section (Year)35```3637**AI guardrail**: Never fabricate case citations. Always verify case name, volume, reporter, page, court, and year against a legal database.3839## Contract Analysis4041### Key Contract Elements421. **Parties** — Who is bound?432. **Consideration** — What is exchanged?443. **Terms** — Duration, renewal, termination triggers454. **Representations & Warranties** — What each party guarantees465. **Indemnification** — Who bears risk of loss?476. **Limitation of Liability** — Caps on damages487. **Governing Law** — Which jurisdiction's law applies498. **Dispute Resolution** — Litigation vs. arbitration vs. mediation5051### Red Flag Checklist52| Red Flag | Risk | Action |53|----------|------|--------|54| Unlimited liability | Uncapped exposure | Negotiate cap |55| Auto-renewal without notice | Lock-in | Add notice period |56| Broad indemnification | Asymmetric risk | Narrow scope |57| Non-compete > 2 years | Enforceability risk | Reduce duration |58| Unilateral amendment rights | Loss of control | Require mutual consent |5960### Contract Review Tracker6162```json63{64 "contract": "SaaS Agreement v2.1",65 "counterparty": "Vendor Inc.",66 "effective_date": "2026-05-01",67 "review_status": "in_progress",68 "issues": [69 {70 "section": "7.2",71 "clause": "Limitation of Liability",72 "finding": "Cap excludes gross negligence carve-out",73 "severity": "high",74 "recommendation": "Add carve-out for gross negligence and willful misconduct",75 "resolved": false76 },77 {78 "section": "12.1",79 "clause": "Auto-renewal",80 "finding": "30-day notice period too short",81 "severity": "medium",82 "recommendation": "Negotiate to 90 days",83 "resolved": true84 }85 ]86}87```8889## Regulatory Compliance Frameworks9091### Cross-Industry92| Framework | Domain | Key Requirements |93|-----------|--------|-----------------|94| **GDPR** | Data privacy (EU) | Consent, right to erasure, DPO, 72hr breach notification |95| **CCPA/CPRA** | Data privacy (CA) | Opt-out of sale, right to delete, annual risk assessments |96| **SOX** | Financial reporting | Internal controls, CEO/CFO certification, audit trail |97| **ADA** | Accessibility | Reasonable accommodation, website accessibility |9899### Industry-Specific100| Framework | Industry | Focus |101|-----------|----------|-------|102| **HIPAA** | Healthcare | PHI protection, minimum necessary, BAAs |103| **PCI-DSS** | Payments | Cardholder data, encryption, access controls |104| **FERPA** | Education | Student records, directory information |105| **GLBA** | Financial | Customer financial privacy, safeguards |106| **COPPA** | Children's data | Parental consent, data minimization |107108## Intellectual Property109110### IP Type Quick Reference111| Type | Protects | Duration | Registration |112|------|----------|----------|-------------|113| **Copyright** | Original creative works | Life + 70 years | Automatic (registration strengthens) |114| **Trademark** | Brand identifiers | Indefinite (with use) | Optional but recommended |115| **Patent** | Inventions/processes | 20 years (utility) | Required |116| **Trade Secret** | Confidential business info | Indefinite (if secret) | No registration; protect via NDA |117118### AI-Generated Content IP Considerations119- Copyright Office position: AI-generated content without human authorship is not copyrightable120- Works with significant human creative input may qualify121- Always document the human creative contribution in the process122123## Legal Document Drafting124125### Structure of a Legal Memorandum1261. **Question Presented** — The specific legal issue1272. **Short Answer** — Direct conclusion1283. **Statement of Facts** — Relevant facts only1294. **Discussion** — IRAC analysis (Issue, Rule, Application, Conclusion)1305. **Conclusion** — Recommendation with confidence level131132### Plain Language Principles133- Avoid legalese where clarity serves the reader134- Define terms on first use135- Use active voice for obligations ("Licensor shall deliver" not "delivery shall be made")136- One concept per sentence in critical provisions137138## Compliance Monitoring139140### Compliance Program Elements1411. **Policies & Procedures** — Written, accessible, current1422. **Training** — Role-based, annual, documented1433. **Monitoring** — Regular audits and spot checks1444. **Reporting** — Whistleblower channels, incident response1455. **Enforcement** — Consistent disciplinary actions1466. **Documentation** — Retain records per retention schedule147148### Retention Schedule Guidelines149| Document Type | Typical Retention |150|--------------|------------------|151| Contracts | Life of agreement + 6 years |152| Tax records | 7 years |153| Employment records | 7 years post-termination |154| Corporate minutes | Permanent |155| Litigation hold | Until hold lifted |