Making it more specific only invites malicious compliance. If businesses TRULY make a good faith effort, they’ve got nothing to worry about.