legal-compliance-regulatory-change-impactlisted

## Purpose Regulatory change assessments fail by paraphrasing. Someone reads a summary, writes "we need to enhance monitoring", and eighteen months later the regulator asks which paragraph that maps to. This skill breaks the instrument into atomic, individually testable obligations tied to provision references, and treats "we already do this" as a claim requiring evidence. ## Data classification **Confidential, potentially privileged.** A gap assessment is a written record of where the organisation does not comply. Assume a regulator or a claimant may see it, and consider with counsel whether it should be produced under privilege. **STOP CONDITIONS:** | Trigger | Action | | --- | --- | | The work is part of, or responsive to, an investigation, enforcement action, skilled-person review, or litigation | Stop. Privilege and disclosure decisions come first. Route to counsel. | | Counsel's advice or a without-prejudice regulator communication is pasted | Stop. Do not summarise or excerpt privileged material. | | Customer, client or employee personal data is pasted as an example of the issue | Stop. Assessment works on obligations and controls, not on records. Ask for it to be removed. | | Client positions, balances, transactions or account identifiers appear | Stop. Name the category, not the value; ask for a de-identified extract. | | The user asks for a legal conclusion on whether the firm is in breach | Stop short of the conclusion. Produce the obligation, the evidence gap