The structure of legal compliance depends on something more essential than policy advice or industry codes of conduct. It depends on the statutory frameworks that define what is allowed, what is forbidden, and what consequences follow from non-compliance. These frameworks are not fixed instrument