compliance-frameworks

name	Compliance Frameworks
description	Compliance requirements for LLM applications under HIPAA, COPPA, FERPA, and GDPR, with testing methodology and evidence requirements
version	1.0.0

Compliance Frameworks for LLM Applications

Purpose

Provides expert knowledge of regulatory compliance requirements as they apply to LLM-powered applications. Used by agents to identify compliance risks, generate compliance-focused attacks, and produce audit-ready reports.

When to Use

• When scanning applications in regulated industries (healthcare, education, finance)
• When generating compliance-specific reports
• When prioritizing PII and data handling vulnerabilities
• When the user mentions regulatory requirements

Supported Frameworks

Framework	Sector	Key Concern for LLMs
HIPAA	Healthcare	PHI disclosure via LLM responses, PHI in training data, lack of BAA with LLM provider
COPPA	Children's services	Collection of children's data via chat, age verification gaps, persistent storage of conversations
FERPA	Education	Student record disclosure, educational data in prompts, unauthorized access to grades/records
GDPR	EU users	PII processing without consent, right to erasure conflicts with training data, cross-border data transfer

Reference Files

• HIPAA Compliance
• COPPA Compliance
• FERPA Compliance
• GDPR Compliance