When Compliance Fails: Bridging the Gap Between Policy and Practice