legal and compliance authority