affiliate legal risks