there are several ways to reach compliance; not having the information is just the easiest