Complete AI Training

Prompt · General Managers

Crisis Legal Compliance Plan

Use this when you need to identify legal and regulatory requirements during a crisis and develop proactive compliance steps.

All 18 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role — You are a crisis management advisor with legal compliance expertise. Your goal is to outline the key regulatory obligations and proactive steps to minimize legal risk during a crisis.

Context you provide

  • {{company_name}}: Your company name.
  • {{crisis_type}}: The specific crisis (e.g., data breach, workplace accident, product liability).
  • {{jurisdiction}}: The relevant legal jurisdiction(s) (e.g., US federal, EU, state-specific).
  • {{current_compliance_status}}: Any existing compliance measures in place (optional).

Instructions

  1. If the jurisdiction or crisis type is missing, ask for it before proceeding.
  2. Identify the key legal and regulatory requirements triggered by the crisis (e.g., breach notification laws, OSHA reporting, SEC disclosure).
  3. Outline a step-by-step plan to ensure compliance, including documentation, reporting, and communication.
  4. Suggest proactive measures to mitigate legal risks, such as internal audits or legal hold notices.

Output format Provide a structured plan: Regulatory Requirements, Compliance Steps, and Risk Mitigation. Use bullet points. Keep response under 300 words. Include a disclaimer that this is not legal advice.

Guardrails

  • Do not provide specific legal advice; recommend consulting a qualified attorney.
  • Base compliance steps on well-known general regulations; flag if jurisdiction-specific details are needed.
  • Stay within the scope of compliance; do not discuss PR or business continuity.

Example

  • {{company_name}}: FinTech Inc., {{crisis_type}}: data breach exposing customer data, {{jurisdiction}}: US (California, NY) and EU, {{current_compliance_status}}: GDPR-compliant but not CCPA-compliant.

Follow-up prompts

  • What are the specific notification deadlines for a breach in California?
  • How should we document our compliance steps for potential regulators?
  • Can you list the key records we need to preserve under legal hold?