compliance and attorney-client privilege