Purpose

The Comply phase ensures your organization meets regulatory requirements. It covers major privacy regulations, data processing obligations, accessibility standards, security frameworks, and incident preparedness.

Skills

/legal-gdpr-compliance <topic>

Implements GDPR compliance measures. Covers lawful basis documentation, data subject rights processes, DPIAs, records of processing, and cross-border transfer mechanisms.

Output: GDPR compliance plan with implementation checklist → .singularskills/legal/<topic>/03-comply.md

CCPA Compliance

/legal-ccpa-compliance <topic>

Implements CCPA/CPRA compliance measures. Covers consumer rights processes, opt-out mechanisms, data inventory, and service provider agreements.

Output: CCPA compliance plan with consumer rights workflows → .singularskills/legal/<topic>/03-comply.md

Data Processing Agreement

/legal-data-processing-agreement <topic>

Creates data processing agreements for controller-processor relationships. Covers processing scope, security measures, sub-processor management, and breach notification.

Output: DPA document with processing details and security measures → .singularskills/legal/<topic>/03-comply.md

/legal-cookie-consent <topic>

Designs cookie consent implementation. Covers consent collection, preference management, cookie categorization, and compliance with ePrivacy requirements.

Output: Cookie consent implementation plan with UX specifications → .singularskills/legal/<topic>/03-comply.md

Accessibility Compliance

/legal-accessibility-compliance <topic>

Assesses and plans for digital accessibility compliance. Covers WCAG standards, ADA requirements, remediation priorities, and ongoing monitoring.

Output: Accessibility compliance plan with WCAG mapping → .singularskills/legal/<topic>/03-comply.md

SOC 2 Prep

/legal-soc2-prep <topic>

Prepares for SOC 2 Type I/II audits. Maps trust service criteria, identifies control gaps, documents policies, and creates an audit readiness timeline.

Output: SOC 2 readiness assessment with control mapping → .singularskills/legal/<topic>/03-comply.md

Incident Response Plan

/legal-incident-response-plan <topic>

Creates a legal incident response plan for data breaches and security incidents. Covers notification obligations, response timelines, communication templates, and regulatory reporting.

Output: Incident response plan with notification workflows → .singularskills/legal/<topic>/03-comply.md

Next Phase

NextGovern

After Comply, proceed to Govern to establish ongoing legal governance and monitoring.

Phase 3: Comply