I've seen companies adopt stricter compliance rules than required by law when their customers demand it. I have no particular knowledge of this specific case.