Reusable checklist for any country or subnational jurisdiction
Country and Region Readiness Worksheet
Jurisdiction profile
Create one controlled worksheet per country and, when relevant, per province/state/territory or autonomous/Indigenous jurisdiction. Never copy a previous country's legal conclusion into a new one.
| Field | Required evidence |
|---|---|
| Jurisdiction and subregion | Official jurisdiction name, responsible counsel and review date |
| Local use case | Specific problem, end users and testable benefit |
| Consent and privacy | Applicable rules, sensitive inferences, minors, opt-out and deletion processes |
| Source permissions | Platform contract/licence checks and rights of third parties |
| Community governance | Applicable collective permissions and consultative process |
| Hosting and transfers | Data residency, cross-border routes, security and compute footprint |
| Business customer | Demonstrable demand and procurement or contracting constraints |
| Participant compensation | Local payment rails, taxes, exchange controls and clear entitlement rules |
| Commercial data rights | Relevant local IP, contract, consumer and competition law |
| Investment and market rules | Securities classification, distribution, venue, broker/dealer and custody analysis |
| Independent qualification | Assigned reviewers, methods, reproducibility and incident process |
| Accessibility and languages | Tested language, disability access, low-bandwidth and support options |
| Public reporting | Metrics, complaint procedure, local contacts and release approver |
Release gates
- Discovery only: Hypotheses, desk research and independent stakeholder discussions; no participants or financial activity.
- Design review: Documented lawful basis, proposed safeguards, trained local operators and reviewed consultation.
- Synthetic pilot: No raw private user activity; complete technical, rights and privacy tests on synthetic or otherwise properly cleared sources.
- Limited real-world pilot: Separate written operating approval, reviewed consent, audit-ready monitoring, incident response and measurable research objectives.
- Commercial data service: Clear contracts, buyer evidence, legitimate rights, fulfilled services, fee transparency and reconciled customer funds.
- Investment activity: Only with all necessary jurisdiction-specific securities/offering/marketplace permissions, custody, client safeguards and legal authorizations. Never infer from a commercial pilot.
Outcome record
Record the date, evidence links, owner, reviewer, open risks, explicit next gate, decisions and dissenting observations. Missing evidence means not cleared, not silently assumed.