The compliance burden now favours incumbents over competitors

A peculiar dynamic has taken hold across advanced economies. Statute books grow thicker each year, yet the proportion of firms subject to those rules that face meaningful scrutiny continues to shrink. The result is not a well-ordered marketplace but a bifurcated one, in which large incumbents bear compliance costs as a tolerable overhead whilst smaller entrants either risk operating in legal grey zones or abandon the field altogether.

The mathematics of regulatory fragmentation are straightforward. A multinational corporation seeking to handle customer data across the European Union, the United Kingdom, California, and China must now navigate at least four distinct privacy frameworks, each with its own definitions, consent mechanisms, breach notification timelines, and penalty structures. Legal and compliance teams scale with the number of jurisdictions, not with revenue, creating fixed costs that weigh heaviest on firms with the thinnest margins.

This burden has become structural rather than cyclical. Jurisdictions are not converging on common standards but asserting sovereignty over domains once regarded as transnational. Data localisation requirements, supply chain due diligence mandates, and platform governance rules now vary not only between continents but between states and municipalities. The European Union alone has layered the General Data Protection Regulation, the Digital Services Act, the Digital Markets Act, and the Artificial Intelligence Act into a compliance stack that requires dedicated personnel to interpret, let alone implement.

The competitive implications are profound. A technology startup seeking to compete with an established platform must now budget not only for engineering and customer acquisition but for a compliance infrastructure that may rival its core product team in cost. Legal opinions, audit trails, data protection impact assessments, and algorithmic transparency reports do not scale downward. They represent a fixed toll that incumbents pay once and amortise across millions of users, whilst challengers must pay upfront with capital they can scarcely afford to divert from growth.

Regulatory authorities, meanwhile, confront a widening gap between their formal remit and their operational capacity. Enforcement requires investigation, adjudication, and often litigation, all of which demand time and expertise. The number of entities subject to regulation has grown far faster than the budgets of the agencies tasked with overseeing them. In practice, this means that the vast majority of obligated firms will never face an audit, and many of the rules on the books exist more as latent threats than as active constraints on behaviour.

The result is a form of selective enforcement that distorts competition in unpredictable ways. High-profile cases against large technology firms generate headlines and occasional fines, reinforcing the perception that regulation is vigorous. Yet thousands of smaller operators function in a state of uncertain compliance, aware that the rules exist but equally aware that the probability of scrutiny is negligible. This creates an asymmetry in which risk-averse firms over-invest in compliance whilst more opportunistic competitors under-invest, gambling that enforcement will remain sparse.

The phenomenon is not confined to technology. Financial services, pharmaceuticals, food safety, and environmental regulation all exhibit the same pattern. The Basel III capital framework imposes reporting requirements so complex that community banks struggle to justify the cost of participation, leading to consolidation and the withdrawal of services from less profitable markets. Pharmaceutical companies face divergent approval pathways that make it uneconomical to seek authorisation in smaller jurisdictions, leaving those populations dependent on grey-market imports or simply without access.

Some argue that this is a necessary price for safeguarding public goods such as privacy, safety, and environmental integrity. The counter-argument is not that regulation is inherently undesirable but that unenforceable regulation is worse than no regulation at all. It creates moral hazard by penalising the compliant whilst leaving the non-compliant undisturbed. It entrenches incumbents not because they are more efficient but because they can afford the overhead. And it undermines the legitimacy of regulatory institutions when the gap between formal obligation and practical enforcement becomes too wide to ignore.

The political economy of this dynamic is self-reinforcing. Incumbents rarely lobby against new regulation; they lobby for carve-outs, transition periods, and complexity that raises barriers to entry. Regulators, facing resource constraints and political pressure to be seen to act, promulgate rules that look comprehensive on paper but cannot be implemented at scale. Legislators, rewarding visible action over enforcement capacity, add new mandates without commensurately expanding the budgets of the agencies tasked with delivering them.

There is no straightforward remedy. Harmonisation across jurisdictions would reduce fragmentation but faces deep political resistance, as regulatory sovereignty is increasingly understood as an instrument of geopolitical leverage. Simplification of rules would ease compliance costs but risks weakening protections that many constituencies regard as essential. Expanding enforcement budgets would narrow the gap between statute and practice but requires fiscal commitments that few governments are prepared to make in an era of constrained public spending.

What is clear is that the current trajectory is unsustainable. The compliance burden is not distributed evenly across the economy but concentrated on those least able to bear it. The result is not a level playing field but a tilted one, in which scale confers advantages that have little to do with operational efficiency or customer value. Industries that once rewarded innovation and agility now reward incumbency and the capacity to navigate bureaucratic complexity.

The unintended consequence of well-intentioned regulation is the cartelisation of markets by administrative means. Barriers to entry that would be illegal if erected by private agreement are instead constructed through the accumulation of rules that no single actor can reasonably challenge. The effect is the same: reduced competition, higher prices, and slower innovation. The difference is that the mechanism is diffuse and the responsibility obscured, making it politically difficult to address.

Enforcement capacity is not keeping pace with regulatory ambition, and the gap is widening. Jurisdictions continue to assert new obligations over digital services, supply chains, and environmental impacts, yet the agencies tasked with overseeing compliance remain chronically under-resourced. The result is a regulatory landscape in which formal obligations proliferate whilst practical accountability diminishes, creating a system that penalises honesty and rewards calculated neglect.

The question facing policymakers is whether this arrangement serves any coherent public interest. If the goal of regulation is to shape behaviour, then unenforced rules achieve nothing beyond imposing costs on the compliant. If the goal is to signal concern, then the exercise is performative rather than substantive. If the goal is to protect incumbents from disruption, then the system is functioning as designed, but at considerable cost to dynamism and consumer welfare.

What remains unresolved is whether the current model can be reformed or whether it will simply continue to calcify until the distance between statute and reality becomes untenable. The dynamics are clear: fragmentation continues, compliance costs rise, enforcement remains patchy, and competitive advantage accrues to scale rather than merit. The outcome is a marketplace that is neither free nor well-regulated, but something in between, shaped more by the unintended consequences of administrative overreach than by any deliberate design.

This article was produced with AI assistance and reviewed against our editorial standards.