A small-business legal issue register that stays usable
A practical issue-register design for recurring business questions, owners, evidence, review triggers, and open decisions.
For: Small-business operators and their research agents
Help a business prepare organized questions for qualified advisers without converting a checklist into legal conclusions.
What recurring legal questions can a business maintain in an issue register?
Track decisions and obligations that recur or change: entity administration, contracts, people, data, permits, intellectual property, insurance, and disputes. For each entry, record the question, location, source, owner, next review trigger, and unresolved decision. The register organizes work; it does not determine which laws apply.
Start with questions rather than assumed duties
SBA's business guidance emphasizes that obligations depend on business type and location. Use that as a reason to record jurisdiction and activity for each issue, rather than adopting a universal compliance checklist. [S1]
- Entity: what filing or approval event should the business verify next?
- Contracts: which renewal, notice, or pricing decision is approaching?
- People: has a new role or work location created an advice question?
- Data: what information is collected, shared, retained, and deleted?
- Operations: which permit, insurance, or intellectual-property issue needs a current source?
The smallest useful row
A proposed register row has an issue ID, plain-language question, affected activity/location, evidence link, responsible owner, adviser route, due-date basis, next action, and status. Separate a verified external deadline from an internally chosen review date. Add a trigger so a closed question can reopen when facts change.
- Status choices: intake, researching, advice requested, decision pending, implementing, verified closed.
- Evidence status: current primary source, historical source, reported fact, or unknown.
- Closure evidence: completed filing, signed decision, verified configuration, or other actual result.
- Reopen trigger: new location, new product, changed contract, rule change, or incident.
Synthetic row: a software renewal
Fictional issue GC-014 asks whether a collaboration tool should renew. The contract file shows a renewal clause, but the team has not checked amendments. The register records 'notice deadline unverified,' assigns procurement to locate the full agreement, and assigns counsel to interpret the notice provision if needed. An internal review date is set earlier; it is not labeled the contractual deadline.
- Question: renew, renegotiate, or terminate?
- Missing evidence: signed order form and later amendments.
- Business owner: operations; legal interpretation owner: designated counsel.
- Close only when the authorized decision and any required notice action are evidenced.
Review by trigger and consequence
A short recurring review can focus on changed facts, upcoming decisions, and stalled owners. Data-security issues deserve their own concrete evidence: the FTC's guidance addresses knowing what data is held, limiting unnecessary retention, and addressing reported vulnerabilities. [S2]
- Review new and changed issues first.
- Escalate items with externally imposed timing or unresolved authority.
- Keep completed entries searchable without treating an old answer as current advice.
- Summarize open decisions for advisers; share underlying sensitive records only through an authorized route.
Scope and limitations
General U.S.-oriented business organization method. The example company is fictional; no legal, tax, employment, or insurance conclusion is offered.
The topic list is non-exhaustive. Dates, legal applicability, and required approvals must be established for the actual business.
Sources
- U.S. Small Business Administration — Manage your business — Business obligations vary by type and location; business-management and compliance topic directory. Checked 2026-11-05
- Federal Trade Commission — Start with Security: A Guide for Business — Business data minimization, access control, service-provider security, and addressing vulnerabilities. Checked 2026-11-05
Explore further
This register is a starting point for assessing recurring legal-team workflows with Agentic Attorney at https://agenticattorney.com/ . The linked platform does not become the business's counsel through this page. Explore Agentic Attorney.