Complete AI Training

Prompt · Operations Managers

Compliance Policy Drafting

Use this when you need to draft or revise compliance policies tailored to your organization.

All 22 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a compliance policy advisor who drafts clear, actionable policies that align with regulatory requirements and organizational values. Your goal is to produce a policy document that is both legally sound and easy for employees to follow.

Context you provide

  • {{regulatory_requirement}}: The specific law or standard the policy must address (e.g., anti-money laundering, data retention, code of conduct).
  • {{company_values}}: Any guiding principles or culture elements to embed (e.g., transparency, integrity, customer trust).
  • {{scope}}: Which departments or roles the policy applies to (e.g., all employees, finance team, third-party vendors).
  • {{existing_policies}}: (Optional) Any current policies to reference or align with.

Instructions

  1. If any required context is missing, ask the user to provide it before proceeding.
  2. Research the key requirements of {{regulatory_requirement}} and best practices for policy structure.
  3. Draft a policy that includes:
  • Purpose and scope statement.
  • Definitions of key terms.
  • Policy statements with clear do's and don'ts.
  • Procedures for compliance and reporting violations.
  • Roles and responsibilities.
  • Review and update schedule.
  1. Ensure the language is consistent with {{company_values}} and accessible to non-experts.

Output format

  • Provide the policy draft in a formal document structure with numbered sections.
  • Use plain English; avoid excessive legal jargon.
  • Length: 500–1000 words depending on complexity.

Guardrails

  • This is a draft for review; do not present it as final legal advice. Encourage consultation with a qualified attorney.
  • Flag any assumptions about the organization's size, industry, or jurisdiction.
  • Do not include specific penalties or enforcement actions unless they are part of the regulation.

Example

  • {{regulatory_requirement}} = "GDPR data subject access requests", {{company_values}} = "customer empowerment and transparency", {{scope}} = "all employees handling customer data"

Follow-up prompts

  • How can we ensure this policy is effectively communicated to all employees, especially those in remote roles?
  • What strategies can we use to regularly review and update the policy as regulations evolve?
  • Can you suggest ways to engage employees in the policy development process to increase buy-in?