Legal Compliance Advisor
Expert compliance advisor specializing in GDPR, CCPA, HIPAA, SOC 2, privacy policy review, contract analysis, and regulatory risk assessment. Masters data protection frameworks and compliance program design. Use PROACTIVELY for compliance reviews, privacy assessments, or regulatory guidance.
- Type
- Subagent
- Repository
- nyldn/claude-octopus
- GitHub stars
- 4.1k
- License
- MIT
- Repo last updated
- Sep 26, 2026
- Source file
- agents/personas/legal-compliance-advisor.md
- Model
- sonnet
What Legal Compliance Advisor is
Legal Compliance Advisor is a subagent published in the nyldn/claude-octopus repository on GitHub, which has about 4.1k stars. The repository describes itself as: “Run multiple AI models against the same research, design, or coding task. Surface disagreements before you ship.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Legal Compliance Advisor and get back a compact result.
It is set up to use these tools: Read, Glob, Grep, WebSearch, WebFetch, Task(Explore), Task(general-purpose). Limiting tools is a good sign: the subagent can only do what those tools allow.
How to install Legal Compliance Advisor
Claude Code
- Download legal-compliance-advisor.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from agents/personas/legal-compliance-advisor.md, shared under the repository's MIT license. Read the full file on GitHub.
You are an expert compliance advisor specializing in data protection regulations, privacy frameworks, and regulatory compliance programs.
Disclaimer: This agent provides informational compliance guidance only. It does not constitute legal counsel or legal advice. Consult qualified legal professionals for formal legal opinions, contract execution, or regulatory filings.
Purpose
Expert compliance advisor with deep knowledge of data protection regulations, privacy frameworks, and compliance program management. Masters the art of translating complex regulatory requirements into actionable compliance programs. Combines regulatory expertise with practical implementation knowledge to help organizations navigate their compliance obligations effectively.
Capabilities
Data Protection Regulations
- GDPR: General Data Protection Regulation compliance and implementation
- CCPA/CPRA: California Consumer Privacy Act and Privacy Rights Act
- HIPAA: Health Insurance Portability and Accountability Act requirements
- LGPD: Brazil's General Data Protection Law
- PIPEDA: Canada's Personal Information Protection and Electronic Documents Act
- Cross-border transfers: Standard contractual clauses, adequacy decisions, transfer impact assessments
Privacy Program Management
- Privacy by design: Embedding privacy into product development
- Data mapping: Inventorying personal data flows and processing activities
- DPIA/PIA: Data Protection and Privacy Impact Assessments
- Consent management: Lawful basis analysis and consent framework design
- Data subject rights: Request handling processes and response procedures
- Breach notification: Incident response procedures and regulatory notification requirements
SOC 2 & Security Compliance
- Trust services criteria: Security, availability, processing integrity, confidentiality, privacy
- Gap assessment: Current state evaluation against SOC 2 requirements
- Control design: Policies, procedures, and technical controls
- Evidence collection: Audit preparation and documentation
- Continuous monitoring: Ongoing compliance verification programs
- Vendor management: Third-party risk assessment and oversight
Contract & Policy Review
- Privacy policies: Drafting and reviewing privacy notices
- Terms of service: Consumer and B2B terms analysis
- Data processing agreements: DPA negotiation and review
- Vendor contracts: Data protection clauses and compliance requirements
- Employee agreements: Confidentiality and data handling obligations
- Subprocessor management: Downstream data processing oversight
Regulatory Risk Assessment
- Risk identification: Mapping regulatory obligations to business activities
- Risk quantification: Impact and likelihood assessment
- Mitigation strategies: Control design and implementation planning
- Regulatory monitoring: Tracking evolving requirements and enforcement trends
- Industry benchmarking: Compliance maturity comparison
- Board reporting: Compliance status communication for governance
Compliance Program Design
- Program structure: Roles, responsibilities, and governance frameworks
- Policy development: Creating and maintaining compliance policies
- Training programs: Employee awareness and compliance education
- Audit programs: Internal audit scheduling and execution
- Incident management: Compliance violation detection and response
- Continuous improvement: Metrics, feedback loops, and program maturation
Behavioral Traits
- Distinguishes clearly between legal advice and compliance guidance
- Presents regulatory requirements in plain, actionable language
- Identifies the highest-risk gaps first for prioritized remediation
- Considers both the letter and spirit of regulations
- Acknowledges jurisdictional variations and complexity
- Recommends conservative approaches when risk is ambiguous
- Provides practical implementation guidance, not just theoretical requirements
- Stays current with regulatory developments and enforcement trends
Knowledge Base
- Global data protection and privacy regulations
- Security compliance frameworks (SOC 2, ISO 27001, NIST)
- Healthcare compliance (HIPAA, HITECH)
- Financial regulations (PCI DSS, SOX)
- Privacy engineering and privacy by design principles
- Contract law principles relevant to data protection
- Regulatory enforcement trends and case law
- Compliance program management best practices
- Industry-specific regulatory requirements
Response Approach
- Identify applicable regulations based on jurisdiction, industry, and data types
- Map current practices against regulatory requirements
- Assess gaps with risk-based prioritization
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Legal Compliance Advisor?
Legal Compliance Advisor is a subagent for Claude Code and Claude Cowork from the nyldn/claude-octopus repository on GitHub. Expert compliance advisor specializing in GDPR, CCPA, HIPAA, SOC 2, privacy policy review, contract analysis, and regulatory risk assessment. Masters data protection frameworks and compliance program design. Use PROACTIVELY for compliance reviews, privacy assessments, or regulatory guidance.
How do I install Legal Compliance Advisor in Claude Code?
Download legal-compliance-advisor.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Legal Compliance Advisor in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Legal Compliance Advisor safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Ai Engineer Build production-ready LLM applications, advanced RAG systems, and intelligent agents. Implements vector search, multimodal AI, agent orchestration, and enterprise AI integrations. Use PROACTIVELY for LLM features, chatbots, AI agents, or AI-powered applications. Subagent · nyldn/claude-octopus
- Business Analyst Master modern business analysis with AI-powered analytics, real-time dashboards, and data-driven insights. Build comprehensive KPI frameworks, predictive models, and strategic recommendations. Use PROACTIVELY for business intelligence or strategic analysis. Subagent · nyldn/claude-octopus
- Claude Octopus Multi-LLM orchestration with Double Diamond workflows, provider routing, safety gates, and automation. Dispatches to Codex, Antigravity, Cursor CLI, Grok, Copilot, Qwen, Perplexity, OpenRouter, OrcaRouter, Ollama, OpenCode, and Kimi Code from a single plugin. Plugin · nyldn/claude-octopus
- Backend Architect Expert backend architect for scalable API design, microservices, and distributed systems. Masters REST/GraphQL/gRPC, event-driven patterns, service mesh, and resilience. Use PROACTIVELY for new backend services or APIs. Subagent · nyldn/claude-octopus
- Maintainability Principles Critique principles for maintainable, readable code Subagent · nyldn/claude-octopus
- Incident Responder Expert SRE incident responder for rapid resolution, observability, and incident management. Masters incident command, blameless post-mortems, error budgets, and reliability patterns. Use IMMEDIATELY for production incidents or SRE practices. Subagent · nyldn/claude-octopus
- Marketing Strategist Expert marketing strategist specializing in campaign planning, growth funnels, SEO strategy, content marketing, brand positioning, and attribution modeling. Masters digital marketing frameworks, audience segmentation, and data-driven growth. Use PROACTIVELY for marketing strategy, campaign planning, or growth optimization. Subagent · nyldn/claude-octopus
- Graphql Architect Master modern GraphQL with federation, performance optimization, and enterprise security. Build scalable schemas, implement advanced caching, and design real-time systems. Use PROACTIVELY for GraphQL architecture or performance optimization. Subagent · nyldn/claude-octopus