| name | compliance-summaries |
| title | Compliance Summary |
| description | Generates structured compliance summaries assessing regulatory posture, identifying gaps, and producing prioritized remediation roadmaps across finance (SEC, FINRA), healthcare (HIPAA, FDA), environmental (EPA), and data privacy (GDPR, CCPA) sectors. Use when drafting regulatory compliance reports, audit readiness assessments, or governance documents for executives, boards, or regulators. For sector-specific depth, defer to dedicated sibling skills (environmental-regulation-summaries, hipaa-privacy-notice, fcpa-compliance-policy, etc.). |
| author | CaseMark |
| author_url | https://github.com/CaseMark/skills/tree/main/skills/legal/compliance-summaries |
| license | Apache-2.0 |
| version | 0.1.0 |
| execution_mode | open |
| jurisdiction | general |
| practice | regulatory |
| language | en |
| tags | ["summary","analysis","summarization"] |
Compliance Summary
Produces a governance-ready compliance summary with gap analysis and prioritized remediation roadmap. Outputs target dual audiences: board-level oversight and operational compliance teams.
Related skills
This skill produces cross-sector compliance summaries. For sector-specific depth, defer to:
- Environmental —
environmental-regulation-summaries (CAA / CWA / RCRA / CERCLA / NEPA / ESA / TSCA), phase-i-esa (Phase I ESA), consent-decree-epa (federal enforcement settlements), nov-response (regulatory NOVs).
- Healthcare —
hipaa-privacy-notice, hipaa-baa, hipaa-release, cpom-compliance, stark-law-aks-compliance.
- Financial services —
bsa-risk-assessment, aml-compliance-program, cip-policy, reg-bi-policy, fcpa-compliance-policy.
- Data privacy —
ccpa-policy, gdpr-data-processing-addendum, data-retention-and-destruction-policy, breach-notification, wisp.
- Government contracts —
c-tpat-security-profile, dd-form-254, oci-mitigation-plan, subcontracting-plan.
Prerequisites
Before drafting, confirm:
- Sector and jurisdiction — finance, healthcare, environmental, data privacy, or other; federal, state, or international scope
- Source documents — compliance policies, internal audits, regulatory correspondence, incident reports, consent orders, prior summaries
- Scope — full enterprise, specific business unit, or defined regulatory domain
Output Structure
1. Executive Summary
| Field | Content |
|---|
| Overall Posture | Compliant / Substantially Compliant / Non-Compliant / Under Active Regulatory Scrutiny |
| Top 3 Risks | Ranked by severity and regulatory exposure |
