Most organisations that are outsourcing use the contract to manage regulatory and other risks. They place obligations on their suppliers to ensure that regulatory obligations are met, usually in the form of a set of policies that have to be adhered to.
