Why no compliance test will catch this. 3 gaps that are hard to catch in a product [AI]

The team passes the legal audit with a clear conscience. The product still fails the user exactly where it was supposed to protect them. [ENG/PL]