Skip to content

Prompts

Prompts de IA jurídica: Compliance / Due Diligence

33 prompts you can paste straight into HAQQ or any other assistant. Every one is written out in full. Open it, copy it, change the bracketed parts.

  • Objecting to a VAT Assessment in the UAEChecklistAdvancedPersonal Tax
    I act for the taxpayer. My client received a VAT assessment and penalties from the Federal Tax Authority dated [date] for [amount] covering tax periods [periods].
    Set out the objection route end to end:
    1. Each stage in order (reconsideration request to the FTA, objection to the Tax Disputes Resolution Committee, appeal to the competent court) with the deadline for each and the date it runs from.
    2. The preconditions for moving to the next stage, including any requirement to settle tax or penalties first.
    3. What each submission must contain to be admissible, and the language it must be in.
    4. The grounds most likely to succeed on these facts, separating challenges to the assessment itself from challenges to the penalty.
    5. A dated action calendar working backwards from the assessment date, flagging the first deadline that is already at risk.
    Mandatory rules: cite the Tax Procedures Law and its Executive Regulations for every deadline, and do not invent an article number. Where a deadline is counted in business days rather than calendar days, say so. If a rule has changed recently, flag that its current form must be verified before filing.
  • Share Transfer Consents in an ADGM CompanyChecklistAdvancedCorporate Governance
    I act for [the transferring shareholder / the company]. For a company limited by shares registered in [ADGM / DIFC], a shareholder wants to transfer [percentage]% to [an existing shareholder / a third party].
    Produce a consent and filing checklist:
    1. Which consents are required (board, shareholders, or both) and where that requirement comes from: the regulations, the model articles, or the company's own articles.
    2. Pre-emption rights: whether they apply by default, how they are waived, and the notice periods.
    3. The register and filing steps with the registration authority, in order, with the deadline for each.
    4. Any regulatory approval triggered by the identity of the transferee or the size of the stake.
    5. The documents to be signed on completion, listed as a closing checklist.
    Mandatory rules: name the specific regulation and section for each requirement, and do not cite one you cannot name precisely. State clearly where the answer depends on the company's own articles rather than the default rule, and tell me exactly which article to read. Where you are not certain a requirement applies, say so rather than assuming it. Do not answer for onshore UAE unless I ask.
  • Cross-Border SaaS: Hosting, Users and RegulatorMemoEnterprisePrivacy & Data Protection
    A software company in [country] is selling a SaaS contract to a [bank / regulated entity] in [country]. Data will be hosted in [location], with end users across [countries].
    Advise the software company:
    1. Which data protection regimes actually apply, and on what connecting factor for each: establishment, targeting, the location of the data, or the customer's own regulatory obligations flowing down.
    2. The transfer mechanism needed for each cross-border flow, and whether hosting in a third country changes it.
    3. What the customer's financial regulator will require of us as an outsourced service provider: audit rights, sub-processor approval, exit assistance, records retention, incident notification windows, and the regulator's own right of access.
    4. Data localisation or residency rules that would defeat the proposed hosting location outright. This is the question that kills deals, so answer it early.
    5. The contractual package: which of these belong in the MSA, the DPA and the security schedule, and what our fallback is on each of the three points the bank will not move on.
    6. A dated action list for getting to signature.
    Mandatory rules: name each law and article. Where a rule is issued by a regulator rather than a statute, say which regulator and which circular. Where you are not certain a requirement is in force, mark it for verification rather than stating it flatly.
  • Registering an Investment Fund With the CMAChecklistEnterpriseFinTech / Payments
    Act as CMA counsel. A [foreign / locally licensed] entity wants to register a [public / private / simplified] investment fund in Saudi Arabia to invest in [describe the strategy and asset class].
    Set out the conditions:
    1. Whether the sponsor itself needs a CMA licence to act as fund manager, and which activity that licence covers. This determines whether the whole plan is possible before anything else matters.
    2. Every condition for registering a fund of this specific type: minimum capital, permitted investors, custodian and administrator requirements, board or committee composition, and the auditor.
    3. What must be in the terms and conditions document, and the disclosures the CMA will require for this asset class.
    4. The filing route: forms, language, fees, the review timeline, and what typically triggers a second round of comments.
    5. Ongoing obligations after registration: reporting, valuation frequency, disclosure, and the events requiring prior CMA approval.
    6. Where a foreign sponsor is treated differently from a local one, in a two-column table.
    Mandatory rules: cite the CMA rules, the Investment Funds Regulations and the Capital Market Law by name and article. These rules change; where you cannot confirm the current version, mark the item for verification against the CMA's own published rulebook rather than stating it as current.
  • How Long It Takes to Incorporate in KSAChecklistAdvancedSmall Business
    I am advising a founder on setting up in Saudi Arabia. How long does it take to incorporate a [startup / subsidiary / branch], with [local / foreign / mixed] ownership in the [sector] sector? I want the real answer, not a brochure number.
    Give me:
    1. Every step in order, with the authority that handles it, the realistic elapsed time for each, and what can run in parallel.
    2. The steps that gate everything downstream: the foreign investment licence, the commercial registration, the national address, the Chamber of Commerce, the tax and zakat registration, the GOSI registration, the bank account.
    3. The bank account specifically: say plainly that it is usually the longest single step and why, and what to prepare in advance.
    4. Sector-specific approvals that apply to [sector] and where in the sequence they fall.
    5. A realistic total in weeks, given as a range with the assumption behind each end of it, plus the three things that most often add a month.
    6. What has to be legalised or attested abroad before anything can start, since that lead time sits outside the country.
    Mandatory rules: state clearly where the timing is a published service-level commitment and where it is practice, and name the authority or portal each figure comes from. Do not present a portal's advertised turnaround as the real one. Flag anything that has changed recently and should be re-confirmed.
  • Licensing an Islamic Bank in IraqChecklistEnterpriseIslamic Finance & Sharia
    I am advising the founding group. What does it take to license an Islamic bank in Iraq under Iraqi law? Produce a full formation checklist.
    Deliverables:
    1. The legislative basis: the Islamic Banking Law, the Banking Law and the Central Bank of Iraq's instructions, and which of them governs which question.
    2. The capital required, how it must be paid up, the deposit deadlines, and any requirement that it stay blocked.
    3. Founders and shareholders: permitted ownership percentages, solvency and fit-and-proper requirements, and restrictions on foreign ownership.
    4. Sharia governance: composition of the Sharia supervisory board, the conditions of membership, its powers, internal Sharia audit, and how all of that relates to the board of directors.
    5. The licensing route step by step: preliminary approval, documents, review period, final approval, and the conditions for commencing business.
    6. Ongoing requirements: capital adequacy, anti-money laundering, periodic reporting, and restrictions on financing structures.
    7. Where the requirements differ from a conventional bank, in a table.
    Mandatory rules: cite the law, the article and the Central Bank instruction number. Where you cannot confirm a figure, a percentage or a deadline, write "to be verified with the Central Bank of Iraq" rather than giving an approximate number. A wrong capital figure in a formation memorandum costs the client the whole deal.
  • Privacy Impact AssessmentReportAdvancedPrivacy & Data Protection
    You are conducting a privacy impact assessment for [Company's] proposed [project/system/product], which will process [describe personal data]. Governing framework: GDPR Article 35, and the equivalent local requirement if the project also operates outside the EU.
    Facts: organization [Company's], project [project/system/product], personal data involved [describe personal data].
    Deliverables:
    1. Description of the processing: purpose, scope, context, and data flows.
    2. Necessity and proportionality assessment against the stated purpose.
    3. Risk identification: likelihood and severity of each risk to individuals.
    4. Existing and planned safeguards, mapped against each risk identified.
    5. Consultation needs, including whether the data protection officer or supervisory authority should be involved.
    6. Recommended mitigating measures, ranked by the risk they address.
    Mandatory rules: do not assert that Article 35 requires this assessment without confirming the processing meets the high risk threshold; if that threshold is not established by the facts given, say so and flag it for confirmation.
  • Cross-Border Data Transfer AssessmentMemoAdvancedPrivacy & Data Protection
    You are advising on whether it is lawful to transfer personal data from [origin country/region] to [destination country].
    Facts: origin [origin country/region], destination [destination country], the categories of personal data and the purpose of the transfer as described by the client.
    Deliverables:
    1. Whether an adequacy decision covers the destination; if none is given in the facts, say so rather than assuming one exists.
    2. The appropriate safeguard available if there is no adequacy decision: standard contractual clauses, binding corporate rules, or another recognized mechanism, and why it fits this transfer.
    3. A Schrems II style assessment of the destination's surveillance and access laws, and the supplementary measures needed to address any gap.
    4. Practical risk if the transfer proceeds without supplementary measures.
    5. A recommendation on whether to proceed, pause, or restructure the transfer.
    Mandatory rules: do not state that a named adequacy decision or safeguard applies to [destination country] unless you can identify it; otherwise flag it for confirmation against the current list before this assessment is relied on. This assessment is an analysis aid for a qualified practitioner, not a substitute for formal legal advice on this transfer.
  • E-Money License Application MemoMemoEnterpriseFinTech / Payments
    You are advising [Company] on obtaining an e-money license in [jurisdiction].
    Facts: [Company]'s proposed business model, the e-money products it intends to issue, and its current corporate structure and ownership.
    Prepare a memo covering:
    1. The licensing regime and the regulator responsible for e-money licenses in [jurisdiction].
    2. Capital requirements, both initial and ongoing, and how they are calculated.
    3. Governance requirements, including fit-and-proper standards for directors and controllers.
    4. AML/KYC obligations that attach to an e-money license specifically.
    5. Safeguarding requirements for customer funds, including permitted safeguarding methods.
    6. The application process and documentation required.
    7. A realistic timeline from application to license grant, and the main risks of delay.
    Mandatory rules: cite the specific statute, regulation, or regulator guidance in [jurisdiction] behind each requirement rather than describing e-money licensing generically. Flag any capital figure, timeline, or requirement you cannot attribute to a named source, and mark it for confirmation with [jurisdiction] regulatory counsel before it is relied on. This memo is a drafting and analysis aid for a qualified practitioner, not a substitute for a formal regulatory opinion.
  • Cross-Border Payment Compliance ReviewReportExpertFinTech / Payments
    You are conducting a compliance review of [Company's] cross-border payment operations.
    
    Facts: the payment corridors [Company's] business operates in, the currencies handled, and the specific [jurisdictions] in scope for this review.
    
    Deliverables:
    1. A summary of licensing requirements for payment or money transmission activity in each of the [jurisdictions], and whether [Company's] business currently holds the relevant authorization.
    2. A review of sanctions screening controls, including list coverage and the point in the transaction flow where screening occurs.
    3. An assessment of applicable FX regulations, including reporting thresholds and any restrictions on the currencies involved.
    4. A review of correspondent banking relationships, including any concentration risk if a single correspondent bank were to exit.
    5. A list of regulatory reporting obligations that apply in each of the [jurisdictions], with filing frequency and the authority each report goes to.
    6. A risk rating for each finding (high, medium, low) with the reasoning behind it.
    
    Mandatory rules: do not state that a licence, exemption, or reporting obligation applies in a given jurisdiction unless it is tied to a named statute or regulator guidance, flag it for local counsel confirmation instead. This is an analysis aid for a qualified lawyer to review, not a substitute for jurisdiction-specific regulatory advice.
  • Stablecoin Issuance FrameworkMemoEnterpriseFinTech / Payments
    You are preparing a legal framework memo for [Company], which is planning to issue a stablecoin in [jurisdiction].
    
    Facts: the stablecoin's reserve asset composition, the redemption mechanism proposed, and the intended user base, retail, institutional, or both.
    
    Deliverables:
    1. Reserve requirements: composition, custody arrangements, and any segregation obligations that apply in [jurisdiction].
    2. Regulatory classification: whether the token is likely to be treated as e-money, a security, a commodity, or a distinct stablecoin category under the regimes in scope, including MiCA and applicable state money transmission law where relevant.
    3. Redemption rights: the terms on which a holder can redeem the token for the reserve asset, and any conditions or delays [Company] can lawfully impose.
    4. Audit and attestation requirements: frequency, scope, and who must perform them.
    5. Consumer disclosures: the risk warnings and reserve composition information [Company] must give holders before or at issuance.
    6. A list of the specific regulations in scope, naming each one, with the obligation it creates for [Company].
    7. Open regulatory questions that need local counsel input before issuance proceeds.
    
    Mandatory rules: do not state that a specific regulation applies to [Company]'s planned issuance, or that a classification is settled, unless you name the provision it rests on, mark it for local counsel confirmation instead. This is a drafting aid for a qualified lawyer to review, not a substitute for regulatory advice.
  • Due Diligence Request ListChecklistAdvancedCorporate / M&A
    You are preparing a due diligence request list for the acquisition of [Target Company] in the [industry] sector.
    
    Facts: the deal structure, share purchase or asset purchase, and the acquirer's principal areas of concern, if any have already been flagged.
    
    Deliverables, as one categorized checklist:
    1. Corporate documents: constitutional documents, minute books, share registers, and corporate approvals.
    2. Financials: audited accounts, management accounts, and any outstanding debt or contingent liabilities.
    3. Material contracts: customer, supplier, and financing agreements above a threshold you should state as a placeholder for the client to set.
    4. Intellectual property: registrations, licences in and out, and any pending disputes.
    5. Real property: owned and leased premises, and any encumbrances.
    6. Employment: contracts, benefit plans, and any pending claims or terminations.
    7. Litigation: current, threatened, and settled disputes with financial exposure noted.
    8. Regulatory compliance and IT and data: licences held, past violations, and data protection posture relevant to the [industry] sector.
    
    Mandatory rules: where an item depends on a document you have not seen, list it as a request rather than assuming its content. Note that this checklist is a starting point for a qualified lawyer to tailor to the specific transaction, not a complete diligence scope on its own.
  • IP Due Diligence ChecklistChecklistAdvancedIP / Licensing
    You act as counsel conducting intellectual property due diligence on [Target Company's] portfolio in connection with [M&A transaction/investment].
    
    Facts: the target's core business (describe), the jurisdictions where its IP is registered or used (list), the structure of the transaction (asset deal, share deal or investment), and any IP disputes already known (describe, or state none known).
    
    Produce a checklist organized under these headings:
    1. Patents: ownership chain, inventorship, prosecution and maintenance status, and freedom to operate concerns.
    2. Trademarks: registration status, classes covered, evidence of use, and conflicting third party marks.
    3. Copyrights: ownership of software, content and works made for hire, including contractor and employee assignments.
    4. Trade secrets: what is protected, how it is controlled, and who has access.
    5. Licenses in and out: scope, exclusivity, term, change of control clauses, and royalty terms.
    6. Assignments and chain of title: gaps in the ownership record.
    7. Encumbrances: liens, security interests or third party rights over the IP.
    8. Litigation and disputes: pending, threatened or settled matters affecting the IP.
    
    For each item, name the document that would confirm it, and mark the item unconfirmed if that document has not been produced.
    
    Mandatory rules: do not state that a right is valid, unencumbered or free of conflicting claims unless a specific registration record, assignment or filed document confirms it.
  • Convert Law Into ChecklistChecklistStandardCorporate / Commercial
    Convert the legal provision at [paste provision text] into a practical compliance checklist for [role, for example in house counsel or compliance officer] operating under [jurisdiction].
    
    Produce a numbered checklist where each item is one concrete obligation drawn from the provision, stating who must act, what must be done, and any deadline.
    
    Mandatory rules: include only obligations that appear in the quoted text, do not infer a requirement the provision does not state, and flag any term in the provision that is ambiguous rather than resolving it yourself.
  • Regulatory Change Impact AssessmentReportExpertCorporate / Commercial
    Act as compliance counsel assessing the impact of [new regulation/amendment] on [company/industry].
    Facts: the effective date of [new regulation/amendment] [date], and the jurisdiction it applies in [jurisdiction].
    Deliverables:
    1. The operations of [company/industry] affected by [new regulation/amendment], named specifically rather than generically.
    2. The compliance gaps between current practice and what [new regulation/amendment] requires.
    3. The policy changes required to close each gap.
    4. An implementation timeline anchored to the effective date.
    5. Risk mitigation strategies for any gap that cannot be closed before the effective date.
    Mandatory rules: cite the specific provision of [new regulation/amendment] behind each requirement you identify. Flag any requirement you cannot attribute to a named provision rather than inferring it from the regulation's general purpose.
  • Regulatory Filing ChecklistChecklistStandardCorporate Governance
    Act as counsel advising a [company type] on regulatory compliance in [jurisdiction]. Create a checklist covering: annual filings and their deadlines, notifications required on changes to directors, officers or registered details, beneficial ownership disclosures, financial reporting deadlines, and the penalties for late or missed submission. Return it as a checklist I can track against a compliance calendar. Cite the specific statute or regulator rule behind each filing requirement; where you cannot identify the source, mark the item for confirmation with local counsel rather than listing it as confirmed.
  • Vendor Risk Assessment QuestionnaireChecklistStandardCorporate / Commercial
    Create a vendor risk assessment questionnaire for evaluating [vendor name] before onboarding for [type of engagement].
    
    Cover data security practices, compliance certifications, business continuity planning, subcontractor management, insurance coverage, financial stability, and incident notification procedures, framed as questions the vendor must answer with supporting evidence.
    
    Mandatory rules: do not assert that a vendor meets a standard or certification requirement, frame every item as a question requiring the vendor's own documentation, and flag any answer that cannot be verified against a certificate or policy document.
  • Divorce Document ChecklistChecklistStandardFamily Law
    Act as counsel advising a client filing for uncontested divorce in [jurisdiction]. Produce a checklist of documents to gather: financial records, parenting-related records if children are involved, real estate documents, retirement account statements, and tax records. Return it as a document I can work through and check off. Mark any document you cannot confirm is required in [jurisdiction] for me to verify with local counsel before relying on the list as complete.
  • Move-Out ChecklistChecklistStarterHousing & Tenancy
    I am a tenant preparing to move out of a [type of rental] in [jurisdiction]. Produce a checklist that maximizes my chances of getting the full deposit back, covering cleaning, repairs, photo documentation, meter readings, forwarding address and the final inspection. Format it as a step-by-step list with a timeline before move-out. Flag any deposit-return deadline or requirement specific to [jurisdiction] that you cannot confirm from a named source, rather than stating it as fixed.
  • Short-Term Rental ComplianceChecklistStandardHousing & Tenancy
    I am the owner of [property] in [city]. List, as a checklist, the licensing, registration, tax, insurance and HOA rules I need to comply with before listing it on a short-term rental platform. For each item, name the specific ordinance, authority or governing document it comes from; where you cannot confirm one, mark it as unverified and tell me to check with the local licensing authority before I list the property.
  • Pay Equity AuditChecklistAdvancedEmployee Rights
    I am an employee assessing my own pay. Governing law: [jurisdiction].
    Facts: my role is [role / title], my experience is [years of experience], my location is [location], and my current pay is [current compensation].
    Deliverables:
    1. The market data points to compare against, such as role, level, location and industry, and where to source them.
    2. A checklist to compare my pay against peers in the same role, controlling for experience and location.
    3. The protected characteristics that could make a pay gap unlawful under [jurisdiction], and the evidence that would support a claim.
    4. The internal steps to raise the issue with my employer before escalating, such as a pay transparency request, HR, or internal review.
    5. The external step if the internal route does not resolve it, and the relevant agency or forum in [jurisdiction].
    Mandatory rules: cite the specific pay equity statute or provision behind any legal threshold you state. If you cannot confirm a rule, agency or deadline from a named source, flag it for me to verify rather than stating it as settled. This is a self-assessment aid, not legal advice.
  • Executor Duties ChecklistChecklistAdvancedEstate Planning
    Act as counsel advising an executor administering an estate in [jurisdiction]. Build a checklist covering:
    1. Notifying institutions and creditors.
    2. Taking inventory of assets.
    3. Obtaining valuations.
    4. Settling debts.
    5. Filing taxes.
    6. Making distributions.
    7. Preparing the final accounting.
    Mandatory rules: cite the statute or probate court rule behind each deadline or filing obligation. Mark any step you cannot attribute to a specific [jurisdiction] requirement as needing confirmation with probate counsel before the executor relies on it.
  • Beneficiary DesignationsChecklistStandardEstate Planning
    Act as counsel advising a client on estate plan coordination. Build a checklist to review and update beneficiary designations on retirement accounts, life insurance policies, payable-on-death accounts and digital wallets, so each matches the current estate plan. Return it as a checklist with a column to note the current designation, the intended designation, and the date updated. Flag any account type where beneficiary rules may override the will or trust under [jurisdiction] law, rather than assuming the estate plan controls. Mandatory rule: do not state a beneficiary designation rule, tax consequence or transfer-on-death effect you cannot attribute to a named provision of [jurisdiction] law; mark it for the client's estate lawyer to confirm.
  • Marriage Visa EvidenceChecklistStandardImmigration
    Act as counsel advising an applicant for a spouse or partner visa to [country]. Build a checklist of evidence to prove a genuine relationship: photographs, communications, shared finances, joint travel, statements from family or friends, and a relationship timeline. Return it as a checklist with a column for what each item is meant to prove. Mark any evidentiary requirement or threshold you cannot attribute to the actual immigration rules of [country] as needing confirmation, rather than presenting it as a fixed requirement.
  • Status MaintenanceChecklistStandardImmigration
    Act as counsel advising a client on maintaining [residence / visa] status in [country]. Build a yearly checklist covering physical presence days, tax filings, address change notifications, renewal deadlines and travel restrictions. Return it as a checklist organized by month. Cite the specific rule behind each day count, deadline or restriction; where you cannot attribute a figure to the actual immigration rules of [country], mark it for confirmation rather than stating it as fixed.
  • VAT RegistrationChecklistStandardPersonal Tax
    Act as a tax adviser to a freelancer in [jurisdiction]. Build a checklist for VAT / sales-tax registration once turnover passes [threshold]: registration, invoicing, returns, reverse charge and digital tools. Do not state a specific rate, threshold figure or filing deadline as current; mark each one [CONFIRM WITH TAX AUTHORITY] instead of presenting it as settled.
  • Regulatory Compliance CalendarChecklistAdvancedLegal Ops / Billing
    Act as compliance counsel to [Company]. Build a compliance calendar for [Company] covering recurring filings, renewals, and reporting deadlines under [list regulations or licenses]. For each item, show the trigger, how far in advance to start preparing, the internal owner, and the consequence of missing it. Flag any deadline you are not fully certain about as [CONFIRM DATE WITH REGULATOR/COUNSEL] instead of guessing a date.
  • Subpoena and Third-Party Records Request ChecklistChecklistAdvancedLegal Ops / Billing
    Act as counsel to [Company]. Build a response checklist for when [Company] receives a subpoena or third-party records request in [jurisdiction]. Cover: confirming the deadline to respond or object, who internally needs to be notified immediately, whether the request calls for privileged or confidential material, the process for a privilege log if documents are withheld, notifying affected employees or customers if required, and the objection grounds available if the request is overbroad. Mark every jurisdiction-specific deadline or procedural rule as [CONFIRM WITH LOCAL COUNSEL] instead of assuming a default rule applies.
  • GCC Employment Termination: Notice, End-of-Service and Local EnforceabilityMemoExpertEmployment
    Act as employment counsel advising [EMPLOYER] on terminating [EMPLOYEE ROLE] in [JURISDICTION: e.g. UAE mainland, DIFC, ADGM, Saudi Arabia, Qatar, Bahrain, Kuwait or Oman]. Facts: [CONTRACT TYPE, START DATE, SALARY STRUCTURE, REASON FOR TERMINATION, WARNINGS ON FILE, VISA OR SPONSORSHIP STATUS]. Ground every entitlement in the article of the applicable labour law or free-zone employment regulation and cite it; where you cannot cite it, say so and mark it for local-counsel confirmation rather than estimating a figure or a period. Return: (1) Termination Route: the legal grounds available in [JURISDICTION], and which of them these facts actually support, with the article for each; (2) Notice, the notice required by the statute and by the contract, which one governs, and how payment in lieu is treated; (3) End-of-Service Entitlements, the components to calculate (end-of-service gratuity or its local equivalent, accrued untaken leave, repatriation, and any pension or savings-scheme contribution that applies), each with its formula inputs and its article; (4) Enforceability Reality Check, which contractual terms are actually enforced locally and on what basis (non-compete scope and duration, garden leave, clawback, notice longer than the statutory minimum, waiver of statutory rights, settlement releases); (5) Immigration and Sponsorship Steps: work permit and visa cancellation, grace period, dependants and exit formalities to confirm; (6) Process and Evidence, the warnings, records, investigation steps and documents to have on file before the termination letter is issued; (7) Claim Exposure, how the employee would frame a claim, the forum that hears it, the limitation period to confirm, and the practical timeline; (8) Action Plan and Open Questions, sequenced steps with owners, and the questions for local counsel. This is a drafting aid for a qualified local practitioner, not legal advice.
  • Obligation Calendar Under a Named MENA Data Protection LawChecklistExpertPrivacy & Data Protection
    Act as privacy counsel building an obligation calendar for [ORGANISATION], a [SECTOR] business processing personal data of individuals in [COUNTRY], under [NAMED LAW: for example the Saudi Personal Data Protection Law (Royal Decree M/19) and its Implementing Regulations, UAE Federal Decree-Law No. 45 of 2021, DIFC Data Protection Law No. 5 of 2020, Bahrain Law No. 30 of 2018, or Qatar Law No. 13 of 2016]. Work only from that named law and its implementing regulations. Cite the article for every obligation; where a deadline, threshold, fee or retention period is not stated in the text you are working from, write "not specified in source, confirm" rather than supplying a number. Return: (1) Applicability: whether and why the law reaches this organisation, including any extraterritorial hook, sector carve-out or free-zone regime that displaces it; (2) Registration and Filings, any registration, licence, appointment or regulator notification, with the article and the event that triggers it; (3) Recurring Obligations, a calendar of what must be done and on what cadence (records of processing, impact assessments, reviews, training, audits), each with article, internal owner and frequency; (4) Event-Driven Deadlines, the clock that starts on a personal-data breach, a data-subject request, a cross-border transfer or a change of processor, with the article and how the period is counted; (5) Cross-Border Transfer Conditions: the permitted grounds, any approval or adequacy step, and any localisation requirement, each cited; (6) Roles and Contract Terms, whether a data protection officer or local representative is required and on what trigger, the controller-processor split, and the clauses the law requires in processor agreements; (7) Enforcement Exposure, the sanctions the law itself provides for, quoted from the text, with no estimate of likelihood; (8) Gap List and Evidence, measured against [CURRENT PRACTICE], what is missing and what artefact [ORGANISATION] must be able to produce to demonstrate compliance, plus the open questions for local counsel. Current practice: [DESCRIBE].
  • Sukuk Structure and AAOIFI Compliance ReviewChecklistEnterpriseIslamic Finance & Sharia
    Act as capital markets counsel reviewing a proposed sukuk issuance by [ORIGINATOR] of [SIZE AND CURRENCY], structured as [ijara / murabaha / mudaraba / musharaka / wakala / hybrid], issued through [SPV AND ITS JURISDICTION], listed on [EXCHANGE], with governing law [GOVERNING LAW] and underlying assets in [COUNTRY]. The question the whole review turns on is whether certificate-holders own a real interest in identified assets or only a claim against the originator dressed as ownership. Answer it explicitly. Do not state an AAOIFI Sharia standard, a listing rule or a local-law position you cannot attribute to a named source; mark it To Be Confirmed and refer it to the Sharia Supervisory Board or local counsel. Return: (1) Structure Diagram in Words: each party, each contract between them, and the direction of every cash flow from subscription to redemption; (2) Asset Test, what the certificate-holders actually own, whether the assets are identified and transferable under the law of [COUNTRY], and whether true sale or only beneficial transfer is achieved; (3) AAOIFI Alignment Checklist, the standards engaged by this structure, and for each one a Met / Gap / To Be Confirmed line with the drafting or structural change needed; (4) Purchase Undertaking Analysis, how the redemption obligation is drafted, whether it prices at par or at market or asset value, and why that distinction matters for the ownership-risk question; (5) Enforcement Reality: what a certificate-holder can actually enforce against, in which forum, and whether the asset transfer would be recognised on the originator's insolvency in [COUNTRY]; (6) Disclosure Gaps, the Sharia, asset, tax and enforcement risk factors the offering document should carry, with a draft heading for each; (7) Approvals and Filings, Sharia board pronouncement, regulator approval, listing, asset-registry and tax steps in sequence with owners and lead times; (8) Decision Memo, the three structural issues most likely to stop this deal, and the question to put to the Sharia Supervisory Board on each. This is a review aid for a qualified practitioner, not legal, tax or Sharia advice.
  • Notarisation, Legalisation and Apostille ChainChecklistAdvancedLegal Ops / Billing
    Act as the lawyer responsible for getting documents accepted abroad. The file is [TRANSACTION OR MATTER]. Documents to move: [LIST, with who issued each and where]. Country of origin: [COUNTRY A]. Country where they must be accepted: [COUNTRY B]. Receiving body: [COURT / COMPANY REGISTRY / LAND REGISTRY / BANK / IMMIGRATION AUTHORITY / NOTARY]. Work out the authentication chain end to end. The chain depends on whether both countries are parties to the Hague Apostille Convention. Several states in the region are and several are not, and the difference is a single stamp versus a multi-step consular route that can add weeks. Confirm the current status of both countries against an official source rather than assuming it, and say plainly where you have not confirmed it. Return: (1) Route Decision: apostille route or consular legalisation route, with the source you checked for each country's status and the date you checked it; (2) Step Table, for each document, the ordered steps (notary, chamber of commerce, issuing ministry, foreign ministry, embassy or consulate, receiving-country foreign ministry), with the body, the fee if known, and the realistic turnaround; (3) Translation Point, at which step the translation must be made, whether it must be done by a translator licensed in the destination country, and whether the translation itself is authenticated; (4) Form Traps, originals versus certified copies, documents that expire, signature and seal requirements, documents that a notary will not certify, and language of the underlying document; (5) Corporate Documents: the extra layer for board resolutions, powers of attorney and certificates of incorporation, including who must appear and what proof of authority the notary will demand; (6) Critical Path, the sequence laid on a calendar working backwards from [DEADLINE], showing which steps can run in parallel and which cannot; (7) Failure Modes, the three most common reasons the receiving body rejects a pack, and the check that catches each before submission; (8) Confirmation Questions, the short list to put to the receiving body and to local counsel before starting, because a rejected chain has to be run again from the beginning. Confirm every step with the receiving authority; this is a planning aid, not legal advice.
  • Registered Commercial Agency: Protection and Termination ExposureMemoExpertCorporate / Commercial
    Act as counsel advising [PRINCIPAL] on its distribution or agency arrangement with [AGENT OR DISTRIBUTOR] in [COUNTRY], covering [PRODUCTS] since [START DATE]. State whether the arrangement is [registered with the commercial agencies register / unregistered / registration status unknown], and what the principal wants to do: [terminate, decline to renew, appoint a second party, sell direct, or restructure]. In many civil-law and Gulf jurisdictions a registered agency gives the agent statutory protection that a contract cannot bargain away: exclusivity by operation of law, a renewal right, compensation on termination, and in some places the ability to block the principal's goods at the border. Establish the registration position first, because everything else turns on it. Do not state an agency-law rule, a compensation formula or a limitation period you cannot attribute to a named source; mark it To Be Confirmed for local counsel. Return: (1) Registration Position: how to verify whether this arrangement is registered, with whom, in whose name, and what the register entry itself would show; (2) Protection Map, the statutory rights that attach if it is registered, each stated as a question for local counsel with the article you believe grants it, and what changes if it is not registered; (3) Contract Versus Statute, the clauses in the current agreement that would not survive contact with the local statute (termination for convenience, chosen foreign law, foreign forum, waiver of compensation, non-exclusivity), each with what the local rule is likely to do to it; (4) Termination Routes, the grounds actually available, the notice and process for each, and which of them still triggers compensation; (5) Exposure Estimate: the heads of claim the agent could bring, how compensation is typically measured locally, and the inputs the principal must gather to size it, presented as a range with the assumptions marked; (6) Practical Leverage, what the agent can do while a dispute runs (customs block, registration held against a new appointee, refusal to deregister), and how long the principal would be out of the market; (7) Alternative Structures, restructuring to a supply or reseller arrangement, appointing a local entity, or negotiating an exit, with the trade-off and the deregistration step each needs; (8) Action Plan, sequenced steps with owners, the evidence to gather now, and the questions for local counsel before any notice is sent. This is a strategy aid for a qualified local practitioner, not legal advice.

Other kinds of work

Search all 391 prompts