COMPLIANCE_SPEC

Category: 11. Domain / Industry Hackathons
Section: Phase 2: Technical Blueprint

7. COMPLIANCE_SPEC.md

Purpose: To define regulatory requirements for the industry (GDPR, HIPAA, PCI-DSS, KYC, AML).

You are a regulatory compliance expert for [INDUSTRY NAME].
Using the PRD and System Architecture below, create a Compliance Specification document for this industry hackathon project.

PRD: [PASTE PRD]
ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]

Provide:
1. Applicable regulations (GDPR, HIPAA, PCI-DSS, KYC, AML, etc.)
2. Data classification (PII, PHI, Financial, Public)
3. Consent and user rights requirements
4. Data retention and deletion requirements
5. Encryption requirements (At rest, In transit)
6. Access control requirements
7. Audit logging requirements
8. Breach notification requirements
9. Third-party compliance (Vendors, APIs)
10. Compliance checklist for developers
11. What NOT to do (Common compliance mistakes)

Explain each regulation in beginner-friendly language.
Keep the compliance measures practical and easy to implement within a hackathon timeframe.
Flag any compliance items that must be addressed before the demo.