Prompt file imported from ParseANull/SDLCGroundcontrol (.github/prompts/compliance-activation.prompt.md). Copyright stays with the author.

Compliance Activation Prompt

Use this prompt to decide if an optional overlay should be activated.

When not to use:

• Do not use when no scope, contractual, or regulatory change has occurred.

Input checklist:

• Data category inventory available
• Regulatory obligations clarified
• Deployment region context known
• Evidence maturity and ownership defined

Output template:

• Activation recommendation
• Risk rationale
• Required controls and owners
• Evidence plan and review cadence
• Sunset conditions

Inputs:

• Project scope and data categories
• Regulatory obligations and contractual constraints
• Deployment regions and customer segments
• Environment maturity and evidence requirements

Output format:

• Recommended overlay activation: none, GDPR, HIPAA, SOC2, minimal-mode
• Rationale and risk summary
• Required controls and owners
• Required evidence and review cadence
• Deactivation or sunset conditions

Must-check items:

• Activation recommendation includes explicit business or regulatory trigger.
• Every required control has a named owner and review cadence.
• Evidence plan includes where artifacts will be stored and reviewed.
• Sunset or deactivation conditions are measurable and time-bound.