Legal compliance by-design and by-default