Cherry-picking case offers lessons learned for compliance