Legal Compliance Skill
Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.
Core Principle
Legal work demands precision. Every clause, citation, and compliance check protects against real-world consequences. The standard is accuracy, not speed.
Legal Research
Primary Sources (Binding Authority)
| Source |
Scope |
Example |
| Statutes |
Legislative law |
26 U.S.C. § 501(c)(3) |
| Regulations |
Agency rules |
45 C.F.R. § 164.502 (HIPAA) |
| Case Law |
Court opinions |
Marbury v. Madison, 5 U.S. 137 (1803) |
| Constitutional |
Foundational law |
U.S. Const. amend. XIV |
Secondary Sources (Persuasive)
- Legal treatises and hornbooks
- Law review articles
- Restatements of the Law
- Legal encyclopedias (Am. Jur., C.J.S.)
Citation Format (Bluebook)
Case: Party v. Party, Volume Reporter Page (Court Year)
Statute: Title Source § Section (Year)
Regulation: Volume C.F.R. § Section (Year)
AI guardrail: Never fabricate case citations. Always verify case name, volume, reporter, page, court, and year against a legal database.
Contract Analysis
Key Contract Elements
- Parties — Who is bound?
- Consideration — What is exchanged?
- Terms — Duration, renewal, termination triggers
- Representations & Warranties — What each party guarantees
- Indemnification — Who bears risk of loss?
- Limitation of Liability — Caps on damages
- Governing Law — Which jurisdiction's law applies
- Dispute Resolution — Litigation vs. arbitration vs. mediation
Red Flag Checklist
| Red Flag |
Risk |
Action |
| Unlimited liability |
Uncapped exposure |
Negotiate cap |
| Auto-renewal without notice |
Lock-in |
Add notice period |
| Broad indemnification |
Asymmetric risk |
Narrow scope |
| Non-compete > 2 years |
Enforceability risk |
Reduce duration |
| Unilateral amendment rights |
Loss of control |
Require mutual consent |
Contract Review Tracker
{
"contract": "SaaS Agreement v2.1",
"counterparty": "Vendor Inc.",
"effective_date": "2026-05-01",
"review_status": "in_progress",
"issues": [
{
"section": "7.2",
"clause": "Limitation of Liability",
"finding": "Cap excludes gross negligence carve-out",
"severity": "high",
"recommendation": "Add carve-out for gross negligence and willful misconduct",
"resolved": false
},
{
"section": "12.1",
"clause": "Auto-renewal",
"finding": "30-day notice period too short",
"severity": "medium",
"recommendation": "Negotiate to 90 days",
"resolved": true
}
]
}
Regulatory Compliance Frameworks
Cross-Industry
| Framework |
Domain |
Key Requirements |
| GDPR |
Data privacy (EU) |
Consent, right to erasure, DPO, 72hr breach notification |
| CCPA/CPRA |
Data privacy (CA) |
Opt-out of sale, right to delete, annual risk assessments |
| SOX |
Financial reporting |
Internal controls, CEO/CFO certification, audit trail |
| ADA |
Accessibility |
Reasonable accommodation, website accessibility |
Industry-Specific
| Framework |
Industry |
Focus |
| HIPAA |
Healthcare |
PHI protection, minimum necessary, BAAs |
| PCI-DSS |
Payments |
Cardholder data, encryption, access controls |
| FERPA |
Education |
Student records, directory information |
| GLBA |
Financial |
Customer financial privacy, safeguards |
| COPPA |
Children's data |
Parental consent, data minimization |
Intellectual Property
IP Type Quick Reference
| Type |
Protects |
Duration |
Registration |
| Copyright |
Original creative works |
Life + 70 years |
Automatic (registration strengthens) |
| Trademark |
Brand identifiers |
Indefinite (with use) |
Optional but recommended |
| Patent |
Inventions/processes |
20 years (utility) |
Required |
| Trade Secret |
Confidential business info |
Indefinite (if secret) |
No registration; protect via NDA |
AI-Generated Content IP Considerations
- Copyright Office position: AI-generated content without human authorship is not copyrightable
- Works with significant human creative input may qualify
- Always document the human creative contribution in the process
Legal Document Drafting
Structure of a Legal Memorandum
- Question Presented — The specific legal issue
- Short Answer — Direct conclusion
- Statement of Facts — Relevant facts only
- Discussion — IRAC analysis (Issue, Rule, Application, Conclusion)
- Conclusion — Recommendation with confidence level
Plain Language Principles
- Avoid legalese where clarity serves the reader
- Define terms on first use
- Use active voice for obligations ("Licensor shall deliver" not "delivery shall be made")
- One concept per sentence in critical provisions
Compliance Monitoring
Compliance Program Elements
- Policies & Procedures — Written, accessible, current
- Training — Role-based, annual, documented
- Monitoring — Regular audits and spot checks
- Reporting — Whistleblower channels, incident response
- Enforcement — Consistent disciplinary actions
- Documentation — Retain records per retention schedule
Retention Schedule Guidelines
| Document Type |
Typical Retention |
| Contracts |
Life of agreement + 6 years |
| Tax records |
7 years |
| Employment records |
7 years post-termination |
| Corporate minutes |
Permanent |
| Litigation hold |
Until hold lifted |
1---2name: legal-compliance3description: Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.4---5
6# Legal Compliance Skill
7
8
9> Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.
10
11## Core Principle
12
13Legal work demands precision. Every clause, citation, and compliance check protects against real-world consequences. The standard is accuracy, not speed.
14
15## Legal Research
16
17### Primary Sources (Binding Authority)
18
19| Source | Scope | Example |
20|--------|-------|---------|
21| **Statutes** | Legislative law | 26 U.S.C. § 501(c)(3) |
22| **Regulations** | Agency rules | 45 C.F.R. § 164.502 (HIPAA) |
23| **Case Law** | Court opinions | *Marbury v. Madison*, 5 U.S. 137 (1803) |
24| **Constitutional** | Foundational law | U.S. Const. amend. XIV |
25
26### Secondary Sources (Persuasive)
27
28- Legal treatises and hornbooks
29- Law review articles
30- Restatements of the Law
31- Legal encyclopedias (Am. Jur., C.J.S.)
32
33### Citation Format (Bluebook)
34
35```
36Case: Party v. Party, Volume Reporter Page (Court Year)
37Statute: Title Source § Section (Year)
38Regulation: Volume C.F.R. § Section (Year)
39```
40
41**AI guardrail**: Never fabricate case citations. Always verify case name, volume, reporter, page, court, and year against a legal database.
42
43## Contract Analysis
44
45### Key Contract Elements
46
471. **Parties** — Who is bound?
482. **Consideration** — What is exchanged?
493. **Terms** — Duration, renewal, termination triggers
504. **Representations & Warranties** — What each party guarantees
515. **Indemnification** — Who bears risk of loss?
526. **Limitation of Liability** — Caps on damages
537. **Governing Law** — Which jurisdiction's law applies
548. **Dispute Resolution** — Litigation vs. arbitration vs. mediation
55
56### Red Flag Checklist
57
58| Red Flag | Risk | Action |
59|----------|------|--------|
60| Unlimited liability | Uncapped exposure | Negotiate cap |
61| Auto-renewal without notice | Lock-in | Add notice period |
62| Broad indemnification | Asymmetric risk | Narrow scope |
63| Non-compete > 2 years | Enforceability risk | Reduce duration |
64| Unilateral amendment rights | Loss of control | Require mutual consent |
65
66### Contract Review Tracker
67
68```json
69{
70 "contract": "SaaS Agreement v2.1",
71 "counterparty": "Vendor Inc.",
72 "effective_date": "2026-05-01",
73 "review_status": "in_progress",
74 "issues": [
75 {
76 "section": "7.2",
77 "clause": "Limitation of Liability",
78 "finding": "Cap excludes gross negligence carve-out",
79 "severity": "high",
80 "recommendation": "Add carve-out for gross negligence and willful misconduct",
81 "resolved": false
82 },
83 {
84 "section": "12.1",
85 "clause": "Auto-renewal",
86 "finding": "30-day notice period too short",
87 "severity": "medium",
88 "recommendation": "Negotiate to 90 days",
89 "resolved": true
90 }
91 ]
92}
93```
94
95## Regulatory Compliance Frameworks
96
97### Cross-Industry
98
99| Framework | Domain | Key Requirements |
100|-----------|--------|-----------------|
101| **GDPR** | Data privacy (EU) | Consent, right to erasure, DPO, 72hr breach notification |
102| **CCPA/CPRA** | Data privacy (CA) | Opt-out of sale, right to delete, annual risk assessments |
103| **SOX** | Financial reporting | Internal controls, CEO/CFO certification, audit trail |
104| **ADA** | Accessibility | Reasonable accommodation, website accessibility |
105
106### Industry-Specific
107
108| Framework | Industry | Focus |
109|-----------|----------|-------|
110| **HIPAA** | Healthcare | PHI protection, minimum necessary, BAAs |
111| **PCI-DSS** | Payments | Cardholder data, encryption, access controls |
112| **FERPA** | Education | Student records, directory information |
113| **GLBA** | Financial | Customer financial privacy, safeguards |
114| **COPPA** | Children's data | Parental consent, data minimization |
115
116## Intellectual Property
117
118### IP Type Quick Reference
119
120| Type | Protects | Duration | Registration |
121|------|----------|----------|-------------|
122| **Copyright** | Original creative works | Life + 70 years | Automatic (registration strengthens) |
123| **Trademark** | Brand identifiers | Indefinite (with use) | Optional but recommended |
124| **Patent** | Inventions/processes | 20 years (utility) | Required |
125| **Trade Secret** | Confidential business info | Indefinite (if secret) | No registration; protect via NDA |
126
127### AI-Generated Content IP Considerations
128
129- Copyright Office position: AI-generated content without human authorship is not copyrightable
130- Works with significant human creative input may qualify
131- Always document the human creative contribution in the process
132
133## Legal Document Drafting
134
135### Structure of a Legal Memorandum
136
1371. **Question Presented** — The specific legal issue
1382. **Short Answer** — Direct conclusion
1393. **Statement of Facts** — Relevant facts only
1404. **Discussion** — IRAC analysis (Issue, Rule, Application, Conclusion)
1415. **Conclusion** — Recommendation with confidence level
142
143### Plain Language Principles
144
145- Avoid legalese where clarity serves the reader
146- Define terms on first use
147- Use active voice for obligations ("Licensor shall deliver" not "delivery shall be made")
148- One concept per sentence in critical provisions
149
150## Compliance Monitoring
151
152### Compliance Program Elements
153
1541. **Policies & Procedures** — Written, accessible, current
1552. **Training** — Role-based, annual, documented
1563. **Monitoring** — Regular audits and spot checks
1574. **Reporting** — Whistleblower channels, incident response
1585. **Enforcement** — Consistent disciplinary actions
1596. **Documentation** — Retain records per retention schedule
160
161### Retention Schedule Guidelines
162
163| Document Type | Typical Retention |
164|--------------|------------------|
165| Contracts | Life of agreement + 6 years |
166| Tax records | 7 years |
167| Employment records | 7 years post-termination |
168| Corporate minutes | Permanent |
169| Litigation hold | Until hold lifted |
gabrielmoreira