Compliance and privacy guidance