All prompts
Communicate
Brief the executive team on a regulatory inquiry
Turns a CID, subpoena, or agency letter into a ten-minute executive briefing: what the vehicle actually is, what the regulator suspects, three response postures, and the approvals the CEO signs in the room.
Your prompt
2
Pressure-test it
3
Go deeper
Before you run it
What to gather first
Watch for
What comes back
See an example of what you’ll get
*PRIVILEGED & CONFIDENTIAL - ATTORNEY-CLIENT COMMUNICATION / ATTORNEY WORK PRODUCT*
EXECUTIVE BRIEFING
To: D. Chen (CEO), R. Voss (CFO) | From: J. Lin, General Counsel | Re: FTC Civil Investigative Demand, data-feed product | Date: April 27, 2026
Bottom Line. The FTC served a Civil Investigative Demand on April 22 covering the data-feed product, with a June 5 return date. The fourteen specifications point at whether what we told retailer customers matched what their consumers were told. I recommend we engage outside FTC counsel today, open a privileged internal review, and negotiate the scope of the CID before we produce anything.
What This Is. A CID is the FTC's compulsory process, legally equivalent to a subpoena. If we do not respond or negotiate, the FTC petitions a federal district court to enforce it, and that filing is public. The CID itself is not public. Receiving one does not mean the staff has concluded anything; roughly half of consumer-protection investigations close without action.
What They Suspect. They think we sold retailers a data feed whose actual scope was broader than what those retailers disclosed to their own consumers, and that we knew it. Specifications 3, 7, and 11 ask for internal data-flow diagrams, sales materials from 2022 forward, and every consumer complaint routed to us by a retailer. That is a Section 5 deception theory built on the gap between the diagram and the deck.
Why It Matters. The data-feed product is $24M ARR, 60% of revenue. A consent order in this space typically forces data-minimization changes, mandated customer-facing disclosure language, and a long compliance-reporting tail, all of which touch the product roadmap. Two enterprise renewals close in Q3 and both contracts have regulatory-inquiry notice provisions. California and Texas have already asked informal questions; a federal action would likely convert those into formal ones.
Posture Options.
| Posture | Approach | Spend (60 days) | Timeline | What it signals |
|---|---|---|---|---|
| Cooperate fully | Produce everything on the stated schedule, no scope negotiation | ~$1M | Production by June 5 | Cooperative, but concedes the frame and hands staff the fastest path to a case |
| Negotiate scope | Engage staff in week one, narrow specifications 3, 7, 11, agree a rolling schedule, make an early merits presentation | $1.5M-$2.5M | Production July-August | Professional and prepared; standard practice with this Bureau |
| Resist | Petition to quash, minimal production | $500K, escalating fast | Court fight by July | Reads as concealment; damages a relationship we will need for eighteen months |
Recommended: negotiate scope.
Next Seven Days.
1. Engage outside FTC counsel; T. Williams as relationship partner. (Lin, today)
2. Issue the litigation hold to 38 named custodians plus IT preservation; suspend Slack and mailbox auto-deletion tenant-wide. (Lin, today)
3. Stand up the privileged review team, directed by outside counsel. (Lin + Williams, day 2)
4. First scope call with FTC staff; ask for an extension of the return date in the same call. (Williams, by day 5)
5. Map specifications to systems and estimate volume and cost of a full production. (Lin + IT, day 5)
6. Pull the regulatory-notice clauses from the two Q3 renewal contracts. (Lin, day 5)
7. Prepare a three-sentence holding statement; do not use it unless asked. (Comms + Lin, day 7)
Privilege & Hold. All review work is directed by outside counsel as work product. Any consultant or forensic vendor is retained through counsel, not by the company. Written analysis carries the privilege header. Nobody contacts the FTC except through Williams: no exceptions, including you.
Comms & Disclosure. Internally: do not discuss the CID outside the privileged team. Externally: holding statement only, and only if asked. As a private company we have no securities disclosure obligation; that changes if we file an S-1 or if a Wells notice issues, and I will flag it the day it changes.
Approvals Requested.
1. Engage outside FTC counsel, not to exceed $2.5M for sixty days.
2. Authorize a privileged internal review scoped to the data-feed product, 2022-present.
3. Approve the negotiate-scope posture.
4. Approve the hold scope and the single-channel comms protocol.
---
*(For counsel, not for the meeting.)*
Assumptions I made. That the theory is Section 5 deception rather than an unfairness or data-security theory. This is my read of specifications 3, 7, and 11, not something the CID states [verify with outside counsel]. That the return date is firm and extensions are routinely granted on first request [UNVERIFIED - confirm current staff practice]. That the two Q3 contracts contain regulatory-notice provisions [verify - pull the clauses].
Where this is weakest. The revenue-exposure paragraph assumes a consent order would force product changes that reach the whole data-feed line. That is the worst case, not the expected case, and a CFO will price it as if it were expected. Second: the posture table prices "resist" at $500K, which understates it badly if the FTC petitions to enforce.
What only you can decide. Negotiate scope before producing anything: narrows the record and buys time, but the return date does not move on its own and staff may read delay as resistance, or produce the clean specifications on schedule while negotiating the hard three, which buys goodwill and shows good faith but concedes the frame and sets a production pace you have to sustain. Separately: open a full internal investigation now (you learn the facts before the agency does, and can self-correct while that still counts) or scope it to the specifications only (cheaper, generates less discoverable material, but you may end up briefing the CEO on facts the FTC found first).
What would make this materially better. (1) The full text of specifications 3, 7, and 11: the theory paragraph is currently my inference. (2) The regulatory-notice clauses from the two Q3 renewals, which determine whether customers learn about this from us or from the press. (3) Whether anyone has already spoken to the FTC, formally or informally.
Why this prompt is built the way it is
## Framework
1. **Translate the vehicle first.** A CID, an administrative subpoena, a voluntary request, and a Wells notice are four different problems. Say which one this is, what happens if it is ignored, and whether it becomes public.
2. **Name the theory.** Read the specifications and say what the regulator suspects. "They think we told retailers one thing and consumers another" beats "the inquiry concerns our disclosure practices."
3. **Price it in business terms.** Revenue at risk, product changes a consent order would force, customer-contract triggers, follow-on private litigation, copycat state enforcement.
4. **Three postures, honestly drawn.** Cooperate fully, negotiate scope, resist. Each with approach, spend, timeline, and what it signals to the staff attorney who will remember it.
5. **Privilege and hold on day one.** Investigation directed by counsel, outside counsel engaged, hold issued, auto-deletion suspended, one channel for agency contact.
6. **Disclosure is a separate question.** Materiality, reporting obligations, and who decides. Prepare for a leak; do not volunteer.
7. **End in approvals.** Named, priced, and signable in the meeting, not "next steps."