From hospitals and universities to IT systems, the machinery of compliance meant to reduce risk is increasingly swallowing ...