compliance requirements