bar surveillance requirements