Unpacking the compliance puzzle