Legal compliance

Legal Compliance Skill

Legal research, contract analysis, regulatory compliance, and case law citation for legal professionals.

Core Principle

Legal work demands precision. Every clause, citation, and compliance check protects against real-world consequences. The standard is accuracy, not speed.

Legal Research

Primary Sources (Binding Authority)

Source	Scope	Example
Statutes	Legislative law	26 U.S.C. § 501(c)(3)
Regulations	Agency rules	45 C.F.R. § 164.502 (HIPAA)
Case Law	Court opinions	Marbury v. Madison, 5 U.S. 137 (1803)
Constitutional	Foundational law	U.S. Const. amend. XIV

Secondary Sources (Persuasive)

• Legal treatises and hornbooks
• Law review articles
• Restatements of the Law
• Legal encyclopedias (Am. Jur., C.J.S.)

Citation Format (Bluebook)

Case:       Party v. Party, Volume Reporter Page (Court Year)
Statute:    Title Source § Section (Year)
Regulation: Volume C.F.R. § Section (Year)

AI guardrail: Never fabricate case citations. Always verify case name, volume, reporter, page, court, and year against a legal database.

Contract Analysis

Key Contract Elements

1. Parties — Who is bound?
2. Consideration — What is exchanged?
3. Terms — Duration, renewal, termination triggers
4. Representations & Warranties — What each party guarantees
5. Indemnification — Who bears risk of loss?
6. Limitation of Liability — Caps on damages
7. Governing Law — Which jurisdiction's law applies
8. Dispute Resolution — Litigation vs. arbitration vs. mediation

Red Flag Checklist

Red Flag	Risk	Action
Unlimited liability	Uncapped exposure	Negotiate cap
Auto-renewal without notice	Lock-in	Add notice period
Broad indemnification	Asymmetric risk	Narrow scope
Non-compete > 2 years	Enforceability risk	Reduce duration
Unilateral amendment rights	Loss of control	Require mutual consent

Contract Review Tracker

{
  "contract": "SaaS Agreement v2.1",
  "counterparty": "Vendor Inc.",
  "effective_date": "2026-05-01",
  "review_status": "in_progress",
  "issues": [
    {
      "section": "7.2",
      "clause": "Limitation of Liability",
      "finding": "Cap excludes gross negligence carve-out",
      "severity": "high",
      "recommendation": "Add carve-out for gross negligence and willful misconduct",
      "resolved": false
    },
    {
      "section": "12.1",
      "clause": "Auto-renewal",
      "finding": "30-day notice period too short",
      "severity": "medium",
      "recommendation": "Negotiate to 90 days",
      "resolved": true
    }
  ]
}

Regulatory Compliance Frameworks

Cross-Industry

Framework	Domain	Key Requirements
GDPR	Data privacy (EU)	Consent, right to erasure, DPO, 72hr breach notification
CCPA/CPRA	Data privacy (CA)	Opt-out of sale, right to delete, annual risk assessments
SOX	Financial reporting	Internal controls, CEO/CFO certification, audit trail
ADA	Accessibility	Reasonable accommodation, website accessibility

Industry-Specific

Framework	Industry	Focus
HIPAA	Healthcare	PHI protection, minimum necessary, BAAs
PCI-DSS	Payments	Cardholder data, encryption, access controls
FERPA	Education	Student records, directory information
GLBA	Financial	Customer financial privacy, safeguards
COPPA	Children's data	Parental consent, data minimization

Intellectual Property

IP Type Quick Reference

Type	Protects	Duration	Registration
Copyright	Original creative works	Life + 70 years	Automatic (registration strengthens)
Trademark	Brand identifiers	Indefinite (with use)	Optional but recommended
Patent	Inventions/processes	20 years (utility)	Required
Trade Secret	Confidential business info	Indefinite (if secret)	No registration; protect via NDA

AI-Generated Content IP Considerations

• Copyright Office position: AI-generated content without human authorship is not copyrightable
• Works with significant human creative input may qualify
• Always document the human creative contribution in the process

Legal Document Drafting

Structure of a Legal Memorandum

1. Question Presented — The specific legal issue
2. Short Answer — Direct conclusion
3. Statement of Facts — Relevant facts only
4. Discussion — IRAC analysis (Issue, Rule, Application, Conclusion)
5. Conclusion — Recommendation with confidence level

Plain Language Principles

• Avoid legalese where clarity serves the reader
• Define terms on first use
• Use active voice for obligations ("Licensor shall deliver" not "delivery shall be made")
• One concept per sentence in critical provisions

Compliance Monitoring

Compliance Program Elements

1. Policies & Procedures — Written, accessible, current
2. Training — Role-based, annual, documented
3. Monitoring — Regular audits and spot checks
4. Reporting — Whistleblower channels, incident response
5. Enforcement — Consistent disciplinary actions
6. Documentation — Retain records per retention schedule

Retention Schedule Guidelines

Document Type	Typical Retention
Contracts	Life of agreement + 6 years
Tax records	7 years
Employment records	7 years post-termination
Corporate minutes	Permanent
Litigation hold	Until hold lifted