How would you handle a situation where compliance requirements and customer expectations directly conflict?