Seems quite onerous. There is even a market for advisors specialized in serving "companies and governments looking for help with Oracle".

https://palisadecompliance.com/about/