Which of the following is NOT a common regulatory requirement tor businesses?