external regulatory compliance