How would you explain a complex compliance policy to an employee who has no background in legal or regulatory affairs?