Not considered sufficient to avoid penalties in a court of law. But even that example can be reframed as a failure to calculate total risk in the cost / benefit analysis (i.e. they should have factored in the risk of a lawsuit and federal fine).