What expected ROI are you basing this on? If it made good business sense on its own, it wouldn't be required by law.