The Rulemaker's Shadow: When Compliance Advocacy Reshapes the Regulations You Must Follow

The standard narrative of regulatory compliance positions companies on one side of a clear divide and government agencies on the other. Regulators write rules; companies follow them. Compliance teams interpret requirements; they do not create them. This narrative is tidy, professionally comfortable, and substantially incomplete.

In practice, the boundary between regulated and regulator is far more permeable than most organizations acknowledge. Compliance professionals—through formal comment processes, industry association participation, and the accumulated weight of sustained professional relationships—exercise meaningful influence over the rules they are subsequently required to implement. Understanding the mechanics of that influence, and its implications, is increasingly essential to sophisticated compliance leadership.

The Architecture of Informal Influence

Federal rulemaking in the United States is, by constitutional and statutory design, a participatory process. The notice-and-comment procedures established under the Administrative Procedure Act invite public input on proposed rules, and agencies are obligated to consider substantive comments before finalizing regulations. For regulated industries, this creates a formal channel through which compliance expertise flows directly into rule design.

Industry associations serve as the primary infrastructure for this participation. Organizations such as the American Bankers Association, the Healthcare Financial Management Association, and their equivalents across regulated sectors employ staff who engage continuously with agency personnel, submit detailed technical comments on proposed rules, and participate in advisory committees that shape regulatory priorities long before formal proposals are published. The compliance professionals who populate these associations—often drawn from the largest regulated companies—bring operational knowledge that agencies genuinely lack and cannot easily replicate.

Beyond formal comment periods, the relationships between senior compliance officers and agency staff develop through examination processes, no-action letter requests, and the informal professional networks that characterize most specialized regulatory communities. These relationships are not inherently problematic. They frequently produce better rules, more workable implementation timelines, and interpretive guidance that reflects operational reality rather than theoretical constructs.

But they also create influence that is difficult to see, harder to quantify, and rarely examined with the same rigor that companies apply to their formal compliance obligations.

When Advocacy Becomes Architecture

The ethical and strategic complications arise not from participation itself but from the conditions under which participation occurs. Three patterns deserve particular attention from regulated companies evaluating their advocacy posture.

The incumbency advantage. When large, well-resourced companies shape regulatory requirements through sustained engagement, they frequently—if unintentionally—design rules that reflect their own operational architectures. Requirements that mirror existing large-firm practices impose minimal transition costs on those firms while creating substantial burdens for smaller competitors who must build new infrastructure to comply. The resulting regulatory framework is not necessarily corrupted; it may reflect genuinely sound policy. But it also happens to favor the companies that helped design it, a coincidence worth examining honestly.

The interpretive lock-in. Compliance professionals who develop close working relationships with agency staff often gain access to informal interpretive guidance that is not publicly available. Over time, this creates an asymmetry: companies with deep regulatory relationships operate under a more nuanced and forgiving interpretive framework than companies without those relationships. When the informal guidance eventually crystallizes into formal interpretation—through enforcement action, examination finding, or published guidance—the companies that helped shape it are rarely surprised. Their competitors frequently are.

The burden of co-authorship. Perhaps the most underappreciated dynamic is what happens when advocacy succeeds in ways that were not fully anticipated. Companies that push for specific regulatory outcomes through comment letters and association participation become, in a meaningful sense, co-authors of the resulting requirements. When those requirements prove more burdensome or more ambiguous than expected, the companies that helped create them have limited standing to complain—and may face heightened scrutiny if they subsequently seek exemptions or interpretive relief from rules they helped design.

The Ethical Dimension

For compliance professionals specifically, the advocacy dynamic creates a tension that deserves explicit acknowledgment. The professional obligation of a compliance officer runs to the organization's legal and ethical adherence to applicable requirements. When that same professional participates in shaping what those requirements will be, the roles of advocate and guardian begin to overlap in ways that can compromise both.

This is not an argument against participation in regulatory processes—engagement is legitimate, valuable, and often produces better policy outcomes. It is an argument for deliberate separation of those roles within organizations, and for honest internal conversations about whose interests are being served when compliance leadership engages in advocacy. The company's interests and the broader public interest in sound regulation are not always identical, and pretending otherwise serves neither.

Strategic Guidance for Regulated Companies

Organizations seeking to engage productively in regulatory processes without compromising their compliance posture or their professional integrity should consider the following principles:

Distinguish participation from capture. Engagement in comment periods and advisory processes is appropriate and valuable. Sustained informal relationships that create interpretive advantages unavailable to competitors warrant more careful examination. The distinction matters both ethically and strategically—the latter category creates dependencies that may not survive personnel changes at the agency or shifts in enforcement priorities.

Document advocacy positions separately from compliance analysis. The reasoning that supports a company's regulatory advocacy should not be conflated with the company's internal compliance analysis. These are different functions, and keeping them analytically separate protects the integrity of both.

Anticipate the consequences of successful advocacy. Before investing in efforts to shape a regulatory outcome, regulated companies should model what compliance with the desired rule would actually require—including requirements that might seem favorable in the abstract but prove operationally complex in practice. Advocacy that produces unworkable rules is rarely a strategic success, regardless of whether it achieves its stated objective.

Assess association positions against your own risk profile. Industry associations represent collective interests that may not align precisely with any individual member's exposure. Before adopting an association's advocacy position as your own, evaluate whether the position reflects your specific risk profile or primarily reflects the interests of larger or more influential members.

The relationship between regulated companies and the agencies that oversee them is neither purely adversarial nor purely collaborative. It is a sustained, complex negotiation in which compliance professionals play a more active role than the standard narrative acknowledges. Managing that role with clarity and integrity is itself a form of strategic compliance leadership—one that Cedar MJ Consulting considers essential to sustainable regulatory relationships.