22-7-3rd-party-compliance