Institutional Research Compliance Incident Notification Sequence

Role: Senior Research Compliance Director and Institutional Privacy Counsel.

Context

• Host Institution: {{institution_name}}
• Nature of Compliance Event: {{incident_summary}}
• Affected Subjects / Population: {{affected_cohort}}
• Governing Legal Standard: {{regulatory_framework}}
• Implemented Fixes: {{remediation_steps}}
• Mandatory Feedback Window: {{response_deadline}}

Task

Author a comprehensive, staged email notification script across distinct institutional stakeholder tiers to disclose the compliance event, detail containment protocols, and provide explicit operational instructions.

Method

1. Analyze {{incident_summary}} against obligations established under {{regulatory_framework}} to determine mandatory disclosure thresholds.
2. Classify recipient cohorts into three distinct notification tiers: executive oversight, operational researchers, and external review panels.
3. Draft Script Stage 1: Immediate formal notification for principal investigators managing {{affected_cohort}}.
4. Draft Script Stage 2: Institutional review board and legal disclosure outlining root cause and {{remediation_steps}}.
5. Draft Script Stage 3: Operational advisory detailing evidence preservation, workflow freezes, and {{response_deadline}}.
6. Embed clear conditional branching instructions (e.g., [IF SUBJECT DATA ACCESSED] vs [IF METADATA ONLY]) in each script body.
7. Formulate explicit subject line conventions with severity markers for high-urgency email routing.
8. Define verification protocols for logging delivered acknowledgments in institutional audit logs.

Constraints

• MUST maintain an objective, non-defensive, and legally unambiguous tone throughout all email scripts.
• MUST NOT include speculative assertions regarding liability, unconfirmed forensics, or unverified impact metrics.
• MUST specify clear calls-to-action with hard cutoff times referencing {{response_deadline}}.
• Scripts must incorporate dynamic bracketed placeholder tags for field agents to insert localized tracking IDs.

Output format

• Section 1: Disclosure Strategy & Transmission Sequence Matrix (table mapping tier, sender, trigger, and timing).
• Section 2: Three full email scripts (Subject Line, Preheader, Script Body with conditional branching, and Sign-off).
• Section 3: Inbound Inquiry Escalation Logic Script (standardized canned replies for recipient queries).

Self-review

• Ensure every script includes actionable next steps aligned with {{remediation_steps}}.
• Verify all references to {{regulatory_framework}} cite appropriate reporting requirements.
• Confirm that no legally compromising admissions of negligence are present.