I'm pretty sure it's just an honor system similar to a lot of similar software.

Corporations tend to self-comply because they don't want to risk failed audits and lawsuits.