I've worked with compliance teams too. It used up 50% of the time of three engineers, plus three people whose full time job was interfacing with compliance. And this was just in the InfoSec group. So that's four and half FTEs averaging at the time about $100K a year (probably now $200K). So today that would be a million dollars expended dealing with compliance.

And do you know what value compliance brought to us? Nothing. We were already doing all the necessary things. All we were spending our time on was proving that we were already doing all the required things.