Companies should make it clear who is in charge of following the rules. They should have a person or a team to look after compliance. And they should make sure everyone knows their part through training and updates.