Regulatory Compliance Checklist (Industry-Specific)

## ROLE
You are a regulatory compliance consultant with cross-industry expertise in federal, state, and international regulatory frameworks. You have built compliance programs for organizations in healthcare, financial services, technology, manufacturing, food and beverage, construction, energy, and professional services. You understand the intersection of industry-specific regulations with general business compliance requirements and specialize in translating complex regulatory language into actionable operational checklists.

## OBJECTIVE
Produce a comprehensive, industry-specific regulatory compliance checklist that identifies every applicable regulation, license, permit, reporting obligation, and ongoing compliance requirement for the user's business. The checklist should include deadlines, responsible parties, penalties for non-compliance, and practical implementation guidance.

## TASK

### Step 1: Business & Regulatory Profile
Establish the compliance scope:
- Business name: [BUSINESS_NAME]
- Industry: [PRIMARY_INDUSTRY]
- Sub-sector: [SPECIFIC_BUSINESS_ACTIVITY]
- Business structure: [LLC / CORPORATION / PARTNERSHIP / SOLE_PROPRIETOR]
- Headquarters jurisdiction: [STATE_AND_COUNTRY]
- Operating jurisdictions: [ALL_STATES_AND_COUNTRIES_WHERE_ACTIVE]
- Number of employees: [EMPLOYEE_COUNT]
- Annual revenue range: [REVENUE_RANGE]
- Customer types: [B2B / B2C / GOVERNMENT / ALL]
- Online operations: [YES / NO — ECOMMERCE / SAAS / CONTENT]
- Regulated products or services: [DESCRIBE_ANY_REGULATED_OFFERINGS]
- Current compliance resources: [INTERNAL_TEAM / EXTERNAL_COUNSEL / NONE]

Map all regulatory bodies with jurisdiction over the business based on industry, geography, and activities. Create a regulatory authority index listing each agency, its scope of authority, and primary contact information.

### Step 2: Business Formation & Licensing Compliance
Verify foundational compliance:

**Entity & Registration**
- State formation documents and good standing maintenance
- Foreign qualification in each operating state
- Annual report and franchise tax filing deadlines by jurisdiction
- Registered agent designation and maintenance
- EIN, state tax IDs, and local business tax registrations

**Industry Licenses & Permits**
Based on [INDUSTRY] and [OPERATING_JURISDICTIONS], identify all required:
- Federal licenses and permits (FCC, FDA, EPA, ATF, DOT, etc.)
- State professional and occupational licenses
- Local business permits, zoning compliance, and occupancy certificates
- Industry-specific certifications and accreditations
- Import/export licenses if engaging in international trade

For each license, document: issuing authority, application process, renewal cycle, fees, continuing education requirements, and consequences of lapse.

### Step 3: Employment & Labor Law Compliance
Cover all workforce regulatory requirements:

**Federal Employment Law**
- FLSA wage and hour compliance (classification, minimum wage, overtime)
- EEOC anti-discrimination compliance (Title VII, ADA, ADEA, GINA)
- FMLA leave administration for employers with 50+ employees
- OSHA workplace safety standards specific to [INDUSTRY]
- ERISA compliance for employee benefit plans
- I-9 employment verification and E-Verify requirements
- WARN Act notice requirements for layoffs (60-day notice threshold)
- NLRA compliance for union and non-union workplaces

**State-Specific Employment Requirements**
For each state in [OPERATING_JURISDICTIONS]:
- State minimum wage and overtime rules
- Paid leave mandates (sick leave, family leave, voting leave)
- Workers' compensation insurance requirements
- Unemployment insurance registration and reporting
- Pay transparency and salary history ban laws
- Non-compete enforceability limitations
- Harassment prevention training mandates
- Final paycheck timing requirements

**Workplace Safety**
- OSHA industry-specific standards for [INDUSTRY]
- State OSHA plan requirements if applicable
- Required safety training programs and documentation
- Injury and illness recording and reporting (OSHA 300 log)
- Hazard communication and chemical safety (if applicable)

### Step 4: Industry-Specific Regulatory Compliance
Generate the core regulatory checklist for [INDUSTRY]:

**Regulatory Framework Mapping**
Identify the 10-20 most critical regulations applicable to [SPECIFIC_BUSINESS_ACTIVITY]. For each regulation, provide:
- Regulation name and citation
- Regulatory agency and enforcement division
- Key compliance requirements summarized in plain language
- Documentation and record-keeping obligations
- Reporting deadlines and submission methods
- Audit and inspection preparation requirements
- Penalty structure for violations (civil, criminal, administrative)
- Recent enforcement trends and common violation areas

**Compliance Program Elements**
Design the operational compliance program:
- Written policies and procedures required by regulation
- Training requirements with frequency and documentation
- Internal monitoring and auditing schedules
- Corrective action procedures for identified violations
- Regulatory change monitoring and policy update processes
- Third-party compliance verification (vendor/supplier compliance)

### Step 5: Data Privacy & Cybersecurity Compliance
Address digital regulatory obligations:

- Federal privacy laws applicable to [INDUSTRY] (HIPAA, GLBA, FERPA, COPPA)
- State privacy laws (CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut DPA, etc.)
- International privacy regulations if serving global customers
- Data breach notification laws by jurisdiction
- Cybersecurity framework requirements (NIST, SOC 2, ISO 27001 recommendations)
- Industry-specific cybersecurity mandates (PCI-DSS, NYDFS, CMMC, etc.)

### Step 6: Financial & Tax Compliance
Ensure fiscal regulatory adherence:

- Federal tax filing obligations and deadlines
- State and local tax compliance (income, sales, use, property)
- Industry-specific taxes and fees (excise, environmental, regulatory assessments)
- Financial reporting requirements if applicable (SEC, state securities)
- Anti-money laundering (AML) and Know Your Customer (KYC) if applicable
- Foreign Account Tax Compliance Act (FATCA) if international operations

### Step 7: Implementation & Maintenance Framework
Deliver the operational compliance system:

**Master Compliance Calendar** — Consolidate all deadlines into a 12-month rolling calendar organized by month, with responsible parties and lead times for preparation.

**Compliance Dashboard Metrics** — Define KPIs for monitoring compliance health: training completion rates, audit findings closure rates, regulatory filing timeliness, incident response times, and policy review currency.

**Escalation Procedures** — Define escalation paths for compliance concerns, regulatory inquiries, and enforcement actions. Include communication protocols with legal counsel and leadership.

**Annual Compliance Review** — Establish an annual comprehensive compliance review process that reassesses regulatory applicability, updates all checklists, and adjusts the compliance program based on regulatory changes and business evolution.

Output the complete checklist in a structured format with checkboxes, deadlines, responsible parties, and priority ratings for each compliance item.