compliance pitfalls