Engaging regulators productively is a craft that is largely passed on within firms by oral tradition. The rules are not in any textbook, but they are remarkably consistent across financial regulators (SEC, FCA, BaFin), telecoms regulators (FCC, Ofcom, BNetzA), and emerging AI regulators (FTC, ICO, CMA, Commission AI Office). What follows is the structured playbook senior corporate affairs practitioners apply when they do this well.
Principle 1: the regulator's calendar is the master calendar
Every regulator runs on a cycle: consultation periods, rulemaking windows, enforcement priorities reset, annual statements. The firm that maps and respects this calendar — submitting to consultations on time, requesting meetings during the appropriate window, anticipating priority resets — earns a reputation as a competent counterparty. The firm that engages on its own schedule earns a reputation as a nuisance.
Mapping the calendar is mechanical work that should be done annually by the public affairs team, shared with the legal and business teams, and converted into a firm-wide engagement plan. Most firms do not do this and pay for it in friction.
Principle 2: bring problems early, not solutions late
Regulators reward firms that surface emerging issues early, before they become enforcement matters. They penalise firms that arrive with fully formed positions late in the process. The asymmetry surprises many corporate teams: regulators are not adversaries to be cornered, they are decision-makers who appreciate being given time to think.
The implication: a firm that identifies a regulatory ambiguity in its business should reach out informally to the regulator within months, not years. The informal conversation costs nothing, generates intelligence, and earns goodwill. The same conversation held under formal enforcement pressure costs millions and earns hostility.
Principle 3: never ask for guidance you cannot accept
A core mistake of corporate engagement: asking for regulatory guidance and then ignoring it when it arrives. Regulators have long memories. A firm that solicits an informal view, receives one it dislikes, and pretends never to have asked, has burned credibility that will not be rebuilt for years.
The discipline: before asking, decide internally what the firm will do if the answer is the worst plausible one. If that path is unacceptable, do not ask.
Principle 4: the trade body is your competitor's vehicle, not yours
Trade associations are useful for issues on which the industry has aligned interests. They are useless — and often counterproductive — for issues on which firms have divergent interests. The competent corporate affairs team uses the trade body for the alignable issues and engages directly on the firm-specific issues, with no expectation that the trade body will represent them.
The failure mode is to outsource all regulatory engagement to the trade body, and then be surprised when the trade body's position privileges the largest member, who happens to be the firm's main competitor.
Principle 5: the response to a consultation is a strategic document
Most consultation responses are drafted by junior counsel, reviewed by the GC, and submitted with minimal C-suite involvement. This is a strategic error. A consultation response is the firm's on-the-record position on a regulatory question; it will be cited back at the firm in future enforcement matters, in litigation, and in subsequent rulemakings. It deserves the same scrutiny as a public earnings statement.
The discipline: the CEO reads and signs off on every consultation response of substance. The response is drafted to be readable by a regulator under time pressure: short, clearly structured, with the firm's position visible in the executive summary.
Principle 6: enforcement is a relationship, not an event
Firms that treat enforcement matters as one-off legal events extract the worst possible outcomes. Firms that treat enforcement as an ongoing relationship — with continuity of counsel, continuity of senior firm representative, and continuity of substantive engagement — extract substantially better outcomes.
The corollary: the senior public affairs lead should attend major enforcement meetings, even when not strictly required. Their presence signals that the firm treats the matter as institutional, not transactional.
The five rules that survive across regulators
To summarise the operating playbook: (1) map the regulator's calendar and respect it; (2) bring issues early; (3) never ask what you cannot accept; (4) use trade bodies selectively; (5) treat consultations and enforcement as strategic, not legal-procedural.
Firms that apply these five disciplines consistently outperform their peers on regulatory outcomes by margins that justify the investment several times over.