Legal requirements for an EICR