identify and manage legal risks and comply with law