For companies meeting strict criteria, EPA's new audit policy offers relief from punitive and criminal penalties. However, the scope of legally binding protections is not always clear cut