First-Party Compliance: Regulatory Constraints for Original Creditors