Scope 3 compliance challenges