S3.3.3 - complying with legal and organisational guidelines