three.eight. The regulator will assess regardless of whether organizations have fulfilled their obligation of care, like by reference to relevant codes of practice, and compliance with the company’s personal appropriate phrases and situations.