WHY REGULATORY COMPLIANCE RELIES ON A WELL-DEFINED LEGAL FRAMEWORK