In the legislative arena, it involved passing laws requiring certain actions by agency or program management, the use of various prevention and/or detection methodologies, and periodic agency reporting on the status of improvement efforts.
Laws were passed that required action on the part of agency management.
No laws were passed that changed anything.