Compliance isn't something your organization just is. Especially small and growing organizations can unintentionally break laws.
http://smb.management/Ssjmpg