MISP, legal and policy compliance