⚖️ Global Compliance Skill

AI-powered compliance assistant that helps enterprises check documents, generate compliance policies, assess risks, and query regulations for GDPR, CCPA, SOC 2, ISO 27001, HIPAA, and other standards.

📦 Installation

Step 1: Install the Skill

clawhub install global-compliance

Step 2: Install via npm

# Install globally
npm install -g openclaw-global-compliance

# Verify installation
compliance --version
compliance help

🚀 Usage

When to Use This Skill

AUTO-TRIGGER when user's message contains:

Keywords: compliance, GDPR, CCPA, privacy policy, 合规, 隐私政策, 风险评估
Asks about legal/regulatory requirements
Wants to check documents for compliance
Needs to generate compliance documents
Wants risk assessment for different regions

TRIGGER EXAMPLES:

"Check if my privacy policy complies with GDPR"
"Generate a GDPR-compliant privacy policy"
"What are the CCPA requirements?"
"Assess our compliance risk"

DO NOT USE when:

Only general legal questions (use general legal research)
Contract review (use contract analysis tools)

🎯 Core Features

Complete compliance management system:

🔍 Compliance Checking - GDPR, CCPA, SOC 2, ISO 27001, HIPAA
📄 Document Generation - Privacy policies, terms of service, DPA
⚖️ Risk Assessment - Multi-jurisdiction risk analysis
📚 Regulation Query - Search and query compliance requirements
📊 Audit Reports - Generate professional audit reports
🌍 Multi-Region Support - EU, US, China, Brazil, global

💻 Agent Usage Guide

Primary Commands

When user requests compliance checking or document generation, use these commands:

Check Compliance:

compliance check --type gdpr --file privacy-policy.md --output report.json

Generate Document:

compliance generate privacy-policy \
  --company "Company Name" \
  --region eu \
  --industry saas \
  --data-types "pii,usage-analytics" \
  --output privacy-policy.md

Assess Risk:

compliance assess \
  --company-info company.json \
  --standards "gdpr,ccpa,soc2" \
  --output risk-report.pdf

Query Regulations:

compliance query --standard gdpr --topic "data retention"

Example Workflows

Example 1: Check GDPR Compliance

User: "Check if my privacy policy complies with GDPR"

Agent:

Ask for policy file or content
Execute: compliance check --type gdpr --file policy.md
Summarize results and provide recommendations

Example 2: Generate Privacy Policy

User: "Generate a GDPR-compliant privacy policy for my SaaS company"

Agent:

Gather company info (name, industry, data types)
Execute: compliance generate privacy-policy --company "CompanyName" --region eu --industry saas
Review output and offer to save file

Example 3: Multi-Standard Assessment

User: "We're expanding to Europe. What compliance requirements do we need?"

Agent:

Collect company details
Execute: compliance assess --company-info info.json --standards "gdpr,soc2"
Explain high-priority gaps and provide roadmap

⚙️ Supported Standards

Data Privacy

GDPR - EU General Data Protection Regulation
CCPA - California Consumer Privacy Act
PIPL - China Personal Information Protection Law
LGPD - Brazil General Data Protection Law

Information Security

ISO 27001 - Information Security Management
SOC 2 - Service Organization Control
PCI-DSS - Payment Card Industry Data Security

Industry-Specific

HIPAA - Healthcare (US)
GLBA - Financial Services (US)
FERPA - Education (US)

📊 Tool Functions

1. check_compliance

Check document or process for compliance.

Parameters:

standard (string): gdpr | ccpa | soc2 | iso27001 | hipaa
content (string): Document content or file path
checkpoints (array, optional): Specific checks to run

Returns:

{
  compliant: boolean,
  score: number,  // 0-100
  totalChecks: number,
  passedChecks: number,
  failedChecks: number,
  issues: Array<{
    checkpoint: string,
    severity: 'critical' | 'high' | 'medium' | 'low',
    title: string,
    description: string,
    remediation: string
  }>,
  recommendations: string[]
}

2. generate_document

Generate compliance document.

Parameters:

type (string): privacy-policy | tos | dpa | cookie-policy
company_info (object):
- name (string)
- industry (string)
- regions (array)
- data_types (array)
region (string): eu | us | cn | global
language (string, optional): en | zh | es

Returns:

{
  type: string,
  content: string,
  format: 'markdown' | 'html' | 'pdf',
  metadata: {
    standard: string[],
    region: string,
    generated: string
  },
  warnings: string[]
}

3. assess_risk

Assess compliance risk.

Parameters:

company_info (object): Company details
standards (array): Standards to assess
regions (array): Target regions

Returns:

{
  overallScore: number,  // 0-100
  riskLevel: 'low' | 'medium' | 'high' | 'critical',
  byStandard: {
    [standard: string]: {
      score: number,
      gaps: string[],
      priority: number
    }
  },
  recommendations: Array<{
    priority: string,
    title: string,
    description: string,
    effort: string,
    timeline: string
  }>,
  estimatedCost: {
    immediate: number,
    annual: number
  }
}

4. query_regulation

Query regulation requirements.

Parameters:

standard (string): Compliance standard
topic (string): Topic to query

Returns:

{
  standard: string,
  topic: string,
  requirements: string[],
  references: Array<{
    article: string,
    text: string,
    url: string
  }>
}

💰 Cost Estimation

Document Checking: Free (rule-based)
AI-Assisted Analysis: $0.01-0.05 per document
Document Generation: $0.02-0.10 per document
Risk Assessment: $0.10-0.50 per assessment

📝 Usage Examples

Example 1: Check Privacy Policy

# Create test policy
cat > policy.md <<EOF
# Privacy Policy
We collect email addresses and usage data.
We use encryption to protect your data.
EOF

# Check GDPR compliance
compliance check --type gdpr --file policy.md

# Output:
# Score: 35/100
# Status: ✗ Non-compliant
# Found 8 issues (3 critical, 5 high)

Example 2: Generate Complete Policy

# Generate GDPR-compliant privacy policy
compliance generate privacy-policy \
  --company "TechStartup Inc" \
  --region eu \
  --industry saas \
  --data-types "pii,usage-analytics" \
  --output privacy-policy.md

# Output: Complete GDPR-compliant privacy policy

Example 3: Multi-Region Risk Assessment

# Assess risk for EU expansion
cat > company.json <<EOF
{
  "name": "US Company",
  "industry": "saas",
  "regions": ["us"],
  "dataTypes": ["pii", "financial"]
}
EOF

compliance assess \
  --company-info company.json \
  --standards "gdpr,ccpa,soc2"

🔧 Troubleshooting

Issue 1: Package Not Installed

Error: command not found: compliance

Solution:

npm install -g openclaw-global-compliance

Issue 2: Config File Missing

Error: Cannot find config file

Solution:

# Create default config
compliance init

📚 Full Documentation

GitHub: https://github.com/ZhenRobotics/openclaw-global-compliance
Documentation: Full compliance guides
Support: GitHub Issues

🎯 Agent Behavior Guidelines

When using this skill, agents should:

DO:

✅ Ask for necessary company information
✅ Provide clear, actionable recommendations
✅ Explain compliance issues in plain language
✅ Warn about legal review requirements
✅ Suggest prioritization for critical issues

DON'T:

❌ Provide legal advice (recommend consulting lawyers)
❌ Guarantee 100% compliance
❌ Skip critical warnings
❌ Auto-publish generated documents without review

📊 Compliance Checkpoints

GDPR (12 checkpoints)

Legal basis for processing
User rights (access, erasure, rectification, portability)
Data retention periods
Third-party sharing disclosure
International transfers
Security measures
Breach notification
Children's data protection
DPO contact (if applicable)

CCPA (8 checkpoints)

Right to know
Right to delete
Right to opt-out
Non-discrimination
Sale of personal information disclosure
Categories of data collected
Third-party sharing
Privacy policy accessibility

SOC 2 (10 checkpoints)

Security policies
Access controls
Change management
Risk assessment
Monitoring and logging
Incident response
Vendor management
Business continuity
Encryption
Physical security

🆕 Version History

v1.0.0 (2026-03-08)

✨ Initial release
🔍 GDPR compliance checker
🔍 CCPA compliance checker (basic)
📄 Privacy policy generator
⚖️ Risk assessment framework
📚 Regulation query system
🤖 CLI tool and Agent integration

Project Status: ✅ Ready for Use

License: MIT

Author: @justin

Support: https://github.com/ZhenRobotics/openclaw-global-compliance/issues

ClawHub: https://clawhub.ai/justin/global-compliance