A lot of these get baked into boilerplate legal agreements companies end up signing when partnering with other companies or dealing with compliance/certificatio

A lot of these get baked into boilerplate legal agreements companies end up signing when partnering with other companies or dealing with compliance/certifications/auditors. It can cost a lot in lawyer time to go back and forth renegotiating and redlining contracts to get all these addressed (and it may not even be an option if you're a smaller business). And this is even if people impacted or implementing the requirements are even involved and suitably motivated to pushback.