There has got to be opportunities here for abstracting over regulation to make it easier to comply with and prove compliance so that risk owners/govt can enact change faster. Now to figure out who would pay for that.