Any statistics for noncompliance at any sizable organization are going to be non-zero due to the law of large numbers. That is just evidence that they exist and do things. The baseline for comparison here shouldn't be zero, it should be the normal statistics for compliance.