Comment by cdmckay

I suspect it’s something similar to the GDPR where the EU passes a law but has very few resources on how to check if you’re actually compliant.