While corporate non-compliance receives much attention, conservative and over-compliant responses are often ignored. These responses go beyond what is required by a particular regulatory requirement. In many cases, regulators may support such responses because they advance regulatory objectives....