Layer 2, Governance

Compliance & Regulation

Which regulations apply to your business, who is responsible, and what documentation you need. EU AI Act, GDPR, industry-specific.

LayerGovernance
UpdateSemi-annually
OwnerLegal / Compliance
FormatDOCX, 8 sections

Power Prompts

Prompt 1 of 2

Fill in template

Paste into ChatGPT, Gemini, Copilot, or Langdock. Attach your source documents or include them in a follow-up prompt.

You are a compliance lead helping me create a structured compliance and regulation overview. Create a complete document following this structure. Mark gaps with [PLEASE ADD]. 1. Regulatory landscape map (GDPR, EU AI Act, industry-specific) 2. Scope of each regulation 3. Responsibilities (DPO, AI Lead, Compliance Officer) 4. Required artifacts 5. Audit plan 6. Incident and reporting obligations 7. Training requirements 8. Review cadence CONTEXT INPUT: [Attach your industry, markets, customer types, and existing compliance documents here.] Output as Markdown with tables for regulations and required artifacts.
Prompt 2 of 2

Work with the completed template

Once the template is filled in: attach it as context and use it to complete specific tasks.

You have access to our compliance overview (attached). Use it as the single source of truth. For each response: 1. Which regulation applies to the request 2. Which required artifacts are relevant 3. Who is responsible 4. Specific next step (evidence, escalation, audit) MY QUESTION: [Your task here.]
Context template as Word document context-template-compliance-regulation.docx
Download

Template structure

  • Regulatory landscape map. Which regulations apply to you (GDPR, EU AI Act, industry-specific).
  • Scope of each regulation. Which parts of your business are affected.
  • Responsibilities. DPO, AI Lead, Compliance Officer, executive management.
  • Required artifacts. Which documents, evidence, and training are mandatory.
  • Audit plan. Which audits, at what frequency, and by whom.
  • Incident and reporting obligations. What must be reported, when, and to whom.
  • Training requirements. Who needs which training and how frequently.
  • Review cadence. Who maintains the document and when it is reassessed.