Legal Compliance or Risk Mitigation