COMPLIANCE_SPEC

Category: 14. Open Innovation / Corporate
Section: Phase 2: Technical Blueprint

7. COMPLIANCE_SPEC.md

Purpose: To define corporate compliance, IP protection, and data governance.

You are a corporate compliance expert.
Using the PRD and System Architecture below, create a Compliance Specification document for this corporate hackathon project.

PRD: [PASTE PRD]
ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]

Provide:
1. Applicable regulations (GDPR, HIPAA, SOX, Industry-specific)
2. Intellectual Property (IP) considerations (Who owns the code?)
3. Data classification (Public, Internal, Confidential, Restricted)
4. Data governance (Ownership, Access, Retention)
5. Consent and user rights requirements
6. Encryption requirements (At rest, In transit)
7. Access control requirements (RBAC, ABAC)
8. Audit logging requirements
9. Third-party vendor compliance
10. Compliance checklist for developers
11. What NOT to do (Common corporate compliance mistakes)

Explain each regulation in beginner-friendly language.
Keep the compliance measures practical and easy to implement within a hackathon timeframe.
Flag any compliance items that must be addressed before the demo, especially regarding IP and data sharing.