EFTA section 919(f) also provides that a regulator enforcing compliance with these requirements may consider, when taking action against the provider, the extent to which the provider has policies and procedures in place, including procedures to exercise oversight of agents or authorized delegates acting on behalf of the provider.43