What do I do when legal compliance still allows real harm?

You can see what the law lets pass, and you can see the harm that slips through the gap. That is a hard place to stand, because your knowledge is exactly what makes the gap visible to you when others get to look away. The discomfort is not a flaw in you; it is your conscience doing its job. The minimum is a floor, not a ceiling. Compliance tells you what you must not go below, never what is right. You are allowed to hold both truths: that you meet the law, and that meeting it is not always enough. Do not let the floor become your whole sense of what is possible. Pick one thing you can raise above the minimum without waiting for permission, and raise it. One recommendation in a report, one practice you push a little further. You cannot close every gap, but you can refuse to pretend it is not there.