compliance defense