Out of compliance – new guidance explains the implications