legal-compliance

Files (2)

• SKILL.md
• legal-compliance-excellence-skill.md · references/

SKILL.md (first lines)

# Legal & Compliance Expert

Comprehensive legal frameworks for governance, contracts, regulatory compliance, and risk management.

## Corporate Governance

### Board Structure & Responsibilities

```
BOARD COMPOSITION:
- Independent directors (majority required for NYSE/NASDAQ)
- Lead independent director
- Committee structure
- Board diversity requirements
- Skills matrix

KEY COMMITTEES:
1. Audit Committee (all independent)
2. Compensation Committee (all independent)
3. Nominating/Governance Committee (all independent)
4. Risk Committee (financial institutions)
```

### Fiduciary Duties

| Duty                   | Definition                         | Key Considerations                     |
| ---------------------- | ---------------------------------- | -------------------------------------- |
| **Duty of Care**       | Act with reasonable prudence       | Informed decisions, due diligence      |
| **Duty of Loyalty**    | Act in corporation's best interest | Avoid conflicts, corporate opportunity |
| **Duty of Good Faith** | Act honestly and fairly            | No intentional harm, follow law        |
| **Duty of Disclosure** | Full and fair disclosure           | Material information, no omissions     |

### Business Judgment Rule

```
PROTECTION REQUIREMENTS:
1. Decision made in good faith
2. No personal interest in outcome
3. Reasonably informed decision
4. Rational belief action is in company's best interest

ENHANCED SCRUTINY (Revlon Duties):
- Triggered in change of control
- Duty to maximize shareholder value
- Active market check required
```

## Regulatory Compliance

### Sarbanes-Oxley (SOX) Compliance

```
KEY SECTIONS:

Section 302: CEO/CFO Certifications
- Certify financial statements
- Certify disclosure controls
- Report control deficiencies

Section 404: Internal Control Assessment
- Management assessment required
- External auditor attestation (accelerated filers)
- Material weakness disclosure

Section 906: Criminal Penalties
- Criminal certification of financial reports
- Up to $5M fine / 20 years imprisonment

COMPLIANCE FRAMEWORK:
- COSO Internal Control Framework
- Documentation of key controls
- Testing program (design + operating effectiveness)
- Deficiency evaluation process
- Remediation tracking
```

### GDPR Compliance

| Requirement                    | Description                                            | Penalties               |
| ------------------------------ | ------------------------------------------------------ | ----------------------- |
| **Lawful Basis**               | Consent, contract, legitimate interest                 | Up to 4% global revenue |
| **Data Subject Rights**        | Access, rectification, erasure, portability            | Up to 4% global revenue |
| **Data Protection Officer**    | Required for large-scale processing                    | Administrative fines    |
| **Breach Notification**        | 72 hours to authority, without undue delay to subjects | Up to 4% global revenue |
| **Privacy by Design**          | Built-in privacy controls                              | Up to 4% global revenue |
| **Data Processing Agreements** | Required with all processors                           | Up to 2% global revenue |

### HIPAA Compliance

```
PRIVACY RULE:
- Protected Health Information (PHI) protections
- Minimum necessary standard
- Patient rights (access, amendment)
- Business Associate Agreements

SECURITY RULE:
- Administrative safeguards
- Physical safeguards
- Technical safeguards
- Risk assessment requirement

BREACH NOTIFICATION:
- Individual notice within 60 days
- HHS notification (>500 individuals: immediate)
- Media notification if >500 in state

PENALTIES:
Tier 1: Unaware - $100-$50,000/violation
Tier 2: Reasonable cause - $1,000-$50,000/violation
Tier 3: Willful neglect (corrected) - $10,000-$50,000/violation
Tier 4: Willful neglect (uncorrected) - $50,000/violation
```

### Anti-Corruption (FCPA/UK Bribery Act)

```
FCPA ELEMENTS:
Anti-Bribery:

From travisjneuman/.claude, MIT.

More from travisjneuman/.claude