Am I compliant? Which pieces of the puzzle are missing?