Aim for Compliance by Design, Not by Accident