“it is a burden on low-risk entities”