VSA 10 is not FIPS compliant as it's using an AES algorithm that's not approved by the FIPS policy. I am not sure if there is a law that requires the policy to be enabled however Microsoft is no longer recommending the FIPS policy usage. You can read more about this from here.