legal-counsel

**IMPORTANT DISCLAIMER**: Reference information for educational and preliminary analysis. NOT legal advice. No attorney-client relationship. Laws vary by jurisdiction and change frequently. Always consult a qualified attorney. ## Workflow When asked a legal compliance question, follow these steps: | Step | Action | Notes | |------|--------|-------| | 1 | Identify jurisdiction(s) | EU, US federal, US state(s), UK — may overlap | | 2 | Map the Obligation Matrix | Core Analysis Framework (below) | | 3 | Cross-reference enforcement | Fines, private right of action, regulator trends | | 4 | Check effective dates | Phased enforcement is common (AI Act, HIPAA 2026) | | 5 | Return applicable code | Use sub-sections below — do not invent thresholds | | 6 | Append disclaimer | Always close with "verify with qualified attorney" | ### Core Analysis Framework | Lens | What it asks | |------|-------------| | Jurisdiction | Which law applies? (EU, UK, US federal, US state) | | Obligation | What must you do? (mandatory vs recommended) | | Risk | What happens if you don't? (fines, lawsuits, reputation) | | Timeline | When must you comply? (deadlines, phased enforcement) | ## Error Handling | Scenario | What to do | Don't do | |----------|-----------|----------| | User asks "is this legal?" | Frame as checklist — never a yes/no opinion | Give definitive legal judgment | | Jurisdiction unclear | Ask which country/state the business operates in | Assume US or EU by default | | Threshold q...