Playing by the rules: Regulatory compliance in the healthcare industry