Compliance Counsel
Legal
SmartSuite for the Compliance Counsel
Compliance Counsel is the lawyer embedded in the compliance program. They interpret regulations, advise on obligations and policy wording, support investigations and regulatory responses, and make sure compliance decisions are legally defensible and documented.
Reports to:
What you own
Compliance Counsel is the lawyer embedded in the compliance program: interpreting regulations, advising on obligations and policy wording, supporting investigations and regulatory responses, and keeping compliance decisions legally defensible and documented.
- Interpret regulations and advise on their application to the business
- Review policies, procedures and training for legal accuracy
- Support compliance investigations and privilege decisions
- Draft and review responses to regulatory inquiries
- Advise on remediation and self-disclosure decisions
- Track legal developments affecting the compliance program
At a glance
The GRC processes this role owns, touches and depends on.
Owns
accountable for the process
Touches
contributes or approves
Depends on
consumes its output
How the GRC processes connect
Three lines of defence set the frame; the chain shows where each process hands off to the next. Colours follow the Compliance Counsel: navy is owned, blue is touched, grey is depended on.
- First lineThe business and its control ownersRun the processes, own the controls, fix the issues
- Second lineRisk, compliance and the domain programmesSet the frameworks, assess, monitor and advise
- Third lineInternal auditIndependent assurance to the board and audit committee
Reporting lines
Who this role reports to, who reports to them, and the peers they work with most.
Reports to
General Counsel
See the roleDirect reports
Works closely with
Compliance Director
See the roleRegulatory Affairs Manager
See the roleEthics and Compliance Lead
See the rolePrivacy Counsel
See the roleChief Compliance Officer
See the roleHow SmartSuite supports the Compliance Counsel
The compliance program stands on your interpretations, and the General Counsel, the Chief Compliance Officer and any regulator expect them to be documented and defensible. SmartSuite gives Compliance Counsel a place to record advice against the obligation it affects, review policies with version history and run investigations as restricted cases with their own document log.
Interpret regulations and keep advice defensible
Legal Matter Management records each interpretation as a matter linked to the obligation, policy or control it affects, so when the Regulatory Affairs Manager asks why a requirement is read a certain way the reasoning is there.
Legal Operations suiteThe AI Assistant in a SmartDoc field drafts a summary of regulatory text and a first list of obligations for your review, so analyzing a new rule starts from a draft list of duties rather than a blank page.
Legal Operations suiteA legal calendar holds filings, effective dates and review obligations with automated reminders, so a change in law affecting the program is tracked to a date rather than a note.
Legal Operations suiteWork with compliance, regulatory affairs and privacy
Policy Management routes drafts through legal review and approval with version history, so the Ethics and Compliance Lead can show which wording you approved and when it changed.
Compliance Management suiteInvestigations run as cases with access limited to counsel and named reviewers, so the structure that protects privilege is enforced by permissions rather than by reminding people what not to forward.
Compliance Management suiteRegulatory Inquiries holds the request, the documents supplied, draft responses and deadlines together, so you and the Compliance Director answer from one file rather than from parallel email threads.
Compliance Management suiteKeep the General Counsel and the CCO informed
Dashboards show open compliance matters, regulatory inquiries, their owners and their deadlines, so your weekly check with the General Counsel starts from current workload rather than a verbal update.
Legal Operations suiteAdvice on remediation or self-disclosure is recorded against the specific compliance finding it concerns, so the decision and its legal basis stay together for anyone who later reviews it.
Compliance Management suiteEvery document, decision and approval in a matter or investigation is retained with its history, so if a regulator or a court later asks what was known and when, the record answers.
Legal Operations suiteCompliance management. Links legal requirements to obligations, policies and controls so counsel's interpretations are recorded against the obligation they affect.
Policy management. Routes policies through legal review and approval with version history.
Issues and actions. Supports investigations and regulatory responses as cases with restricted access and document logs.
Reporting. Gives counsel a view of open compliance matters, inquiries and deadlines.
Products this role uses most
Industry reference
The ACC's in-house counsel competencies and the SCCE's compliance and ethics practice describe the role; the DOJ's compliance program evaluation and the FCPA set much of the subject matter. Privilege over investigations, defined in US law by Upjohn, shapes how counsel structures inquiries and documents advice.
Sector rulebooks determine the daily questions: securities and banking law for financial firms, the Anti-Kickback Statute, Stark Law and HIPAA for healthcare, procurement and ethics statutes for public bodies, and privacy, export control and consumer protection law for technology companies.
Related roles
General Counsel
See the roleExplore Further
Guides and definitions from the GRC Knowledge Center and the What-is glossary, chosen for this role.
Frequently asked questions
Compliance Counsel is the lawyer embedded in the compliance program: interpreting regulations and advising on their application, reviewing policies, procedures and training for legal accuracy, supporting investigations and privilege decisions, drafting and reviewing responses to regulatory inquiries, advising on remediation and self-disclosure and tracking legal developments that affect the program. Their job is to make compliance decisions legally defensible and documented, and SmartSuite is where that documentation lives alongside the obligations it concerns.
SmartSuite links legal requirements to the obligations, policies and controls they give rise to, so counsel's interpretation is recorded against the obligation it affects rather than in an email or memo that later cannot be found. When the Compliance Director asks why a control is designed as it is, or a regulator asks how a requirement was read, the interpretation and its date are on the obligation. Compliance Assessments & Testing then tests against that reading.
Policy Management routes policies through legal review and approval with version history, so counsel reviews the exact draft the policy owner proposes, records the approval and can later show which wording was approved and when it changed. Procedures and training materials can follow the same route. The Regulatory Affairs Manager and Ethics and Compliance Lead, who own many of the policies, see counsel's review status without asking.
Investigations and regulatory responses are handled as cases with restricted access and document logs, so privilege can be protected by limiting who sees the case and the record shows what was collected and when. Regulatory Inquiries holds the inquiries with their deadlines and the responses counsel drafts, and Legal Matter Management holds matters that escalate beyond compliance, so an investigation that becomes a legal matter carries its record with it.
SmartSuite gives counsel a view of open compliance matters, inquiries and deadlines, so nothing that needs a response or a privilege decision is lost between the General Counsel's priorities and the Chief Compliance Officer's. Counsel reports into both, and the shared view means each sees the same open list and the same deadlines, with the Privacy Counsel's matters visible where they overlap with compliance ones.
Counsel starts with the obligations the program already tracks and the policies due for review, recording interpretations as they are given rather than back-filling history. Open inquiries and investigations are entered as cases with their access restrictions set. New customers can start with SmartSuite Onboarding, a guided four-week program around one or two priority workflows, and from then the record of legal advice accumulates where the compliance team works, which is what makes a decision defensible when it is questioned years later.