compliance authority