Compliance difference

Help me study for my Cyber Security class. I`stuck and don understand.

1a. Describe the difference between compliance and legal obligations in cybersecurity.

1b. Which is more legally binding; compliance (regulation) or legal obligations (laws) and which   is more significant in protection of consumer?

2a. What are two specifics in compliance and legal obligations?

2b. What oversight is administered to ensure legal obligations are in compliance?

Required Reading: 

Bulll J. H., Montoya, L., Pieters, W., Junger, M., & Hartel, P. H. (2015). The persuasion and security awareness experiment: Reducing the success of social engineering attacks. Journal Of Experimental Criminology, 11(1), 97-115. doi:10.1007/s11292-014-9222-7 Retrieved from EBSCO multi-search database.

Van den Berg, B., & Keymolen, E. (2017). Regulating security on the Internet: control versus trust. International Review Of Law, Computers & Technology, 31(2), 188-205. doi:10.1080/13600869.2017.1298504 Retrieved from EBSCO multi-search database.

A3 Information Security Simplified LLC (2018). Information Security Programs: Legal and Regulatory Compliance [Video file] https://youtu.be/Mn2vovcP3KQ (3:29)

ConvoCourses (2016). Information Security Framework aka System Compliance [Video file] https://youtu.be/DNQ1VqEIZMk (12:21)