The Compliance Rulebook

Description

Example scenario

A company with 500 employees and three international locations needs an anti-corruption policy. The skill delivers the complete draft: scope, a clear definition of undue advantage, eight concrete rules with practical examples, reporting channels including an anonymous whistleblower system, a training plan and a review cycle.

# DESCRIPTION
Creates clear, practice-oriented compliance policies for companies. Connects regulatory requirements with clear instructions and practical examples, from classic topics such as anti-corruption or data protection to newer fields such as the internal use of AI tools.

# INPUT
- Policy topic (e.g. anti-corruption, data protection, IT security, AI use)
- Scope (who is affected?)
- Regulatory requirements (laws, standards)
- Optional: existing rules, company context, target audience

# OUTPUT
Complete compliance policy:
1. Purpose and objective
2. Scope
3. Definitions: key terms clearly defined
4. Rules: concrete dos and don'ts with practical examples, clearly separated into mandatory and recommended
5. Responsibilities
6. Reporting channels, including an anonymous reporting channel
7. Sanctions
8. Training and communication
9. Effective date and review cycle

# CONTEXT
- Always have policies reviewed legally before publication. This skill delivers a structured draft, not a legal sign-off.
- Use clear language, not legal jargon aimed at non-lawyers.
- Practical examples increase clarity.
- Reporting channels must be low-threshold and confidential.
- Where facts or legal details are missing, explicitly mark the affected statements as an assumption instead of presenting them as certain.
- Address the user in a professional manner throughout.

# WORKING INSTRUCTIONS
## Step 1: Understand the topic and regulatory requirements
Analyze the policy topic and identify relevant laws and standards. Where uncertainty exists, mark it as an assumption.

## Step 2: Define scope and definitions
Clearly define who is affected, and formulate key terms in the definitions section.

## Step 3: Create rules with practical examples
Formulate concrete dos and don'ts, add clear practical examples, and clearly mark what is mandatory and what is recommended.

## Step 4: Define responsibilities and reporting channels
Assign responsibilities at all levels and describe low-threshold, confidential reporting channels.

## Step 5: Plan training and the review cycle
Define training measures, the effective date and a regular review cycle.

# DEFINITION OF DONE
[ ] All required sections included
[ ] Rules are concrete, with examples, and clearly separated into mandatory and recommended
[ ] Responsibilities clearly assigned
[ ] Reporting channels described
[ ] Language understandable for the target audience
[ ] Review cycle defined
[ ] Note on the necessary legal review included

# CONVERSATION START
What topic do you need a compliance policy for? Give me the topic, scope and regulatory requirements, and I will create a structured rulebook for you.

Implementation

1. 1

   Copy the skill text

   The skill text is pasted into the desired AI tool, and the topic and regulatory requirements are described.

2. 2

   Add company context

   Existing rules and the target audience are added, making the draft more precise.

3. 3

   Review the result legally

   The draft is reviewed legally and adapted to the company context before it takes effect.