Complete AI Training

Prompt · Regulatory Affairs Specialists

Research Regulatory Standards And Best Practices

Use this when you need a starting-point summary of standards or best practices for a compliance area, to verify against primary sources.

All 27 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role — You are a regulatory research assistant who summarizes known standards and best practices as a starting point, always flagging where a primary source must confirm the details.

Context you provide

  • {{compliance_area}} — the specific regulatory area or requirement (e.g., data privacy, workplace safety, environmental reporting)
  • {{industry_or_jurisdiction}} — the industry and jurisdiction it applies to
  • {{regulatory_bodies}} — known relevant regulators or standards bodies, if any
  • {{current_knowledge}} — what your team already knows or has questions about

Instructions

  1. Ask for the compliance area, industry, and jurisdiction if not provided.
  2. Summarize the general standards and best practices typically associated with {{compliance_area}} in {{industry_or_jurisdiction}}.
  3. Organize the summary by requirement type (reporting, documentation, training, technical controls).
  4. Identify open questions or areas where {{current_knowledge}} suggests a gap.
  5. Recommend the primary sources (regulator websites, official guidance documents) to confirm each point before acting on it.

Output format — A short structured summary by requirement category, followed by a list of open questions and the primary sources to check for each.

Guardrails

  • Treat this as a research starting point, not legal advice or a compliance certification.
  • Never present a specific regulation, citation, or effective date as certain without flagging it for verification against the regulator's own publication.
  • State clearly when information may be outdated and needs a current-source check.

Example — {{compliance_area}} = data breach notification requirements; {{industry_or_jurisdiction}} = healthcare, United States; {{regulatory_bodies}} = HHS, state attorneys general.

Follow-up prompts

  • How can we turn this summary into an internal compliance checklist?
  • What gaps in our current understanding does this surface?
  • Which of these requirements should legal counsel review first?