Regulation rarely arrives as a single event. It arrives as a convergence — several frameworks moving through drafting, consultation, and adoption on overlapping but slightly offset timelines, so that by the time any single one reaches a board agenda, it's already interacting with two others that were easy to miss individually.
Individually manageable. Collectively, a compliance architecture shift.
CIF's regulatory intelligence function exists specifically to track this kind of convergence, not just individual bills or drafts in isolation. Three frameworks currently in motion across different jurisdictions share enough structural overlap — in scope, in reporting obligations, in enforcement posture — that boards treating them as three separate compliance items are underestimating the combined operational lift required once all three land within the same fiscal year.
This is the pattern that most in-house compliance functions are structurally not positioned to catch: they're organized around monitoring their own jurisdiction's pipeline, not around cross-referencing structural similarity across jurisdictions to anticipate where the real complexity compounds.
No single regulation on this list is unmanageable. The combination, arriving in the same year, is what boards are underestimating.
Not "are we compliant," but "are we compliant with what's coming."
The organizations handling this well are the ones treating regulatory intelligence as a forward-looking strategic function, not a backward-looking legal one. That's precisely the distinction behind CIF's Governance & Policy Work — regulatory intelligence that tracks trajectory, not just current text.
If your compliance roadmap only accounts for regulation already in force, it's worth a conversation about what's still in motion.
Request a Confidential Briefing →