Automated compliance tools are helpful, but regular staff training and legal advice are equally important.