Annex 1: What’s changed, what hasn’t, & how to get compliant