Imagine a client needs to meet new regulatory requirements. How would you approach designing a compliant solution?