They only state how their company complies with the act, and not risk. They do however indicate in paragraph 4 how they will go about enforcing their policies.