Maybe somehow we misunderstood how the argument goes and it doesn't exactly-- although these two arguments seem parallel, they're not, in fact, parallel.
Perhaps more damning, the report describes an agency without an overarching compliance system to monitor such activity, and employees who either misunderstood or didn't follow existing reporting rules.