regulatory safe harbor