Business ‘has a poor understanding of its regulatory obligations.