Data analysis for compliance