Agent skill · product strategy · anthropics
compliance-check
Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use when launching a feature that touches personal data, when marketing or product proposes something with regulatory implications, or when you need to know which approvals and jurisdictional requirements apply before proceeding.
Why this skill is useful
Provides domain-specific knowledge on compliance regulations and required actions for various business initiatives that the AI wouldn't reliably generate on its own.
What it needs
About 8k tokens when loaded. Last updated 2026-08-07. 23,345 stars on the source repository.
What this skill does
/compliance-check -- Compliance Review If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md. Run a compliance check on a proposed action, product feature, marketing campaign, or business initiative. Important: This command assists with legal workflows but does not provide legal advice. Compliance assessments should be reviewed by qualified legal professionals. Regulatory requirements change frequently; always verify current requirements with authoritative sources. Usage What I Need From You Describe what you're planning to do. Examples: "We want to launch a referral program with cash rewards" "We're adding biometric authentication to our mobile app" "We need to process EU customer data in our US data center" "Marketing wants to use customer testimonials in ads" Output Privacy Regulation Overview GDPR (General Data Protection Regulation) Scope: Applies to processing of personal data of individuals in the EU/EEA, regardless of where the processing organization is located. Key Obligations for In-House Legal Teams: Lawful basis: Identify and document lawful basis for each processing activity (consent, contract, legitimate interest, legal obligation, vital interest, public task) Data subject rights: Respond to access, rectification, erasure, portability, restriction, and objection requests within 30 days (extendable by 60 days for complex requests) Data protection impact assessments (DPIAs): Required for processing likely to result in high risk to individuals Breach notification: Notify supervisory authority within 72 hours of becoming aware of a personal data breach; notify affected individuals without undue delay if high risk Records of processing: Maintain Article 30 records of processing activities International transfers: Ensure appropriate safeguards for transfers outside EEA (SCCs, adequacy decisions, BCRs) DPO requirement: Appoint a Data Protection Officer if required (public authority, large-scale processing of special …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills anthropics/compliance-check