Regulatory risk and the cost of compliance

Regulatory risk is the possibility that a change in laws, standards or their timing affects an activity: a rule that is new, tightened, loosened, brought forward or pushed back. It differs from ordinary risks (demand, prices, competition) because it depends not on the market but on a public decision. It is therefore hard to predict, often political, and above all hard to hedge: no insurance refunds a change of rule. A company can adapt to a known requirement; it is far more exposed to uncertainty about what the requirement will be, and when it will apply.

Complying with a rule costs money and time: audits, upgrading systems, documentation, training, hiring specialists. This compliance cost is largely incurred before the deadline, to be ready when the day comes. That is where a fragility appears: if the rule is then postponed or altered, the spending already made does not come back. This is called a sunk cost: a sum spent that no future decision can recover. The paradox is that the more diligent a company was, the earlier it incurred these costs, and the more exposed it is if the timetable changes.

The first-mover advantage is often praised. Regulatory risk can turn it into a disadvantage. If a deadline is pushed back at the last minute, the company that got compliant on time paid for nothing more than the one that waited: its lead earns it no benefit, only a cost. Worse, it sends a signal to the others: next time, better to wait. Regulatory uncertainty thus creates a perverse incentive to procrastinate: complying late, betting on a delay, becomes a rational strategy. That is the opposite of what a rule seeks to obtain.

A rule's usefulness rests first on its being known and stable: it is this predictability that lets one invest, prepare, organise an activity. A rule that is endlessly amended, or pushed back at the last moment, loses part of that usefulness, even when each change is justified on its own. For it undermines trust in the regulator's word, a fragile capital that rests on the conviction that it will keep what it announces. For the player subject to the rule, predictability is therefore no luxury: it is what makes the constraint manageable. A strict but stable requirement is preferable to a mild but unpredictable one.