If you don't understand, my suggestion would be for you to research the issues I've brought up.  Otherwise, you risk exposing your client to various incompliance penalties that could be severe, not to mention your own liability.