When to obtain professional help
This project provides technical and operational starting points, not professional advice. Stop the affected rollout and obtain qualified help before:
| Area | Trigger | Reviewer |
|---|---|---|
| Contracts and consumer rights | Membership terms, waivers, renewal/cancellation, deposits, surveillance terms, or exceptions | Lawyer qualified locally |
| Privacy and data protection | Identity, video/biometrics, access history, accessibility/health details, monitoring, cross-border data, or AI profiling | Privacy counsel or qualified data-protection lead |
| Postal and virtual office | Receiving, opening, scanning, forwarding, destroying, or releasing mail and customer verification | Postal/CMRA or local regulatory specialist and counsel |
| Accounting and tax | Chart/tax choices, corrections, recognition, deposits, credits, write-offs, payroll, or statutory reports | Qualified accountant or tax adviser |
| Payments | Card-data scope, payment-flow changes, mandates, disputes, or marketplace funds | Provider and PCI-qualified help as needed |
| Cybersecurity and identity | Public exposure, SSO/MFA, privilege, incidents, encryption/key custody, or high-impact migration | Qualified security practitioner |
| Physical access and safety | Locks, elevators, alarms, emergency systems, capacity, cameras, or visitor denial | Licensed access/fire/building professionals, insurer, authority as applicable |
| Accessibility | Member portals, physical routes, event accommodations, or claimed conformance | Accessibility specialist and affected users |
| Employment and monitoring | Hiring, scheduling, scoring, sanctions, termination, checks, tracking, or surveillance | Employment counsel and HR professional |
| Insurance, property, and regulated use | Liability assumptions, occupancy, subletting, events, food/alcohol, childcare, health, or regulated tenants | Broker, counsel, landlord, and authorities as applicable |
Software and agents must not make final decisions about member eligibility, contracts, pricing exceptions, credit, refunds, debt, identity, consent, access exceptions, emergencies, employment, accommodations, retention, disclosure, or incident closure. Keep a named human approver, reversible decision record, manual route, and disable switch.
When escalating, preserve evidence, minimize shared data, state jurisdiction and assumptions, obtain written scoped advice, update controls/training, and re-test with synthetic data. Vendor product help is not automatically independent legal, financial, security, privacy, accessibility, or safety assurance.