Don’t let deregulation fool you: Just because a compliance requirement disappears, it doesn’t mean the underlying risk does

Richard Chambers

<p>Day one of Donald Trump’s second presidency made it resoundingly clear: The Trump-Vance administration is prioritizing deregulation. He has announced a <a href="https://www.whitehouse.gov/presidential-actions/2025/01/regulatory-freeze-pending-review/">freeze on new federal regulations</a>, an executive order requiring agencies to <a href="https://www.whitehouse.gov/presidential-actions/2025/01/unleashing-prosperity-through-deregulation/">repeal at least 10 rules or regulations</a> for each new one they adopt, and <a href="https://www.whitehouse.gov/presidential-actions/2025/01/initial-rescissions-of-harmful-executive-orders-and-actions/">“initial rescissions” of 80-plus</a> Biden actions, including <a href="https://www.reuters.com/technology/artificial-intelligence/trump-revokes-biden-executive-order-addressing-ai-risks-2025-01-21/">easing rules around AI</a>. Meanwhile, Elon Musk’s Department of Government Efficiency (DOGE) has been taking charge of government agencies like the <a href="https://fortune.com/2025/02/01/elon-musk-doge-treasury-social-security-medicare-payments/?">Treasury Department</a> and <a href="https://fortune.com/2025/02/05/elon-musk-email-fork-in-the-road-resignation-email-federal-workers/?">reducing staff</a>. And we’re less than two months in.</p><div class="paywall-selector"></div><div class="paywall">



<p>In organizations that have long felt the financial and administrative burdens of regulatory compliance, it’s only natural for board members and C-Suite leaders to regard this change with a collective sigh of relief. Less regulation means less budget and personnel allocated to auditing and compliance activities. But don’t start reallocating your compliance dollars yet. Many of the actions are already being challenged in court, and most regulations <a href="https://www.govexec.com/management/2024/12/trump-wants-10-regulations-eliminated-each-new-one-issued-will-it-actually-work/401819/">won’t be easy to do away with</a> given the numerous requirements and time restraints it takes.</p>



<p>That won’t stop the administration from trying—and succeeding in many cases. The new administration will keep pushing to reduce existing federal oversight and issue fewer new regulations. We are moving into an era in which government regulation will be de-emphasized, whatever the eventual specifics.</p>



<h2 class="wp-block-heading">Risk mitigation</h2>



<p>There are two schools of thought among business leaders. One point of view is that this is exactly how risk management should work, reflecting the long-held notion among many business leaders that “governments that govern best govern least”—and in this context, regulate least. Nonprofits, along with environmental and consumer protection groups, see regulation as a positive development, fostering increased corporate social responsibility while helping to reduce overall risk in key areas (e.g., cybersecurity, fraud, climate change). The deregulators won at the ballot box, and we can anticipate a very different regulatory landscape as a result.</p>



<p>Regardless of which side you’re on, there is no question that deregulation actually makes your organization&#8217;s risk management strategy more important. Just because a compliance requirement disappears, it doesn’t mean the underlying risk does. It simply means it will be up to your organization to decide how to manage the risk. And the consequences of failure under deregulation can be much more dire than when regulation exists.</p>



<p>As history attests, government regulatory intervention is most often driven by the underlying risks. A series of <a href="https://corpgov.law.harvard.edu/2022/08/30/the-important-legacy-of-the-sarbanes-oxley-act/">high-profile financial reporting frauds</a> and bankruptcies created a push to improve internal controls over financial reporting, eventually manifesting in the Sarbanes-Oxley Act (SOX) of 2002. <a href="https://www.federalreservehistory.org/essays/dodd-frank-act">Risk management failures</a> in the U.S. banking system spurred the financial crisis of 2007–2008 and subsequent recession, ultimately leading to the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010. The U.S. Securities and Exchange Commission (SEC) cited the rising prevalence of cybersecurity incidents, the potential for “systemic effects on the economy as a whole,” and recent AI developments that may exacerbate cybersecurity threats when enacting 2023’s <a href="https://www.sec.gov/files/rules/final/2023/33-11216.pdf">SEC cybersecurity disclosure rules</a>.</p>



<p>Rather than letting the market bear these risks—and stakeholders and citizens bear the consequences—the government sought to create regulations that would protect everyone. Whether their regulations are effective in doing so isn’t the point. The point is that the regulations are driven by the risks, and the intent of regulations is risk mitigation.</p>



<h2 class="wp-block-heading">Fostering good habits</h2>



<p>Government regulations, at their best, aim to instill good habits in the organizations they regulate. Metaphorically speaking, they make sure you eat your vegetables, drink your milk, wash your hands, and cultivate other habits that reduce risk while promoting health and safety. Many organizations haven’t had to think deeply about managing certain risks because the government was telling them what to do. Accordingly, increasing deregulation should force greater reflection: What are the real risks facing your organization, and how can you ensure you’re managing them effectively?</p>



<p>However, board members and C-suite leaders have an understandable tendency to assume that where no compliance requirements exist, organizations can afford to invest fewer resources. This may be true in some areas, such as environmental regulations, data protection, and cyber disclosure requirements.</p>



<p>But now is not the time to act fast on these assumptions. Before you take action to curtail or roll back the risk management and compliance investments your organization has made, you need a strategic plan to protect the company. This would start with purposeful conversations between the board and C-suite and their internal audit, risk management, infosec, and compliance teams. Questions leadership needs to ask include:</p>



<ul>
<li>What inherent and residual risks does your organization face, even when compliance requirements have gone away? Are investments adequate to help the organization avoid, mitigate, or lean into those risks in the right ways?</li>



<li>How can freed-up resources be strategically redeployed?</li>



<li>How are risk and assurance teams monitoring changing regulations and shifting risks?</li>



<li>How will <a href="https://www.reuters.com/world/trump-lay-out-trade-vision-wont-impose-new-tariffs-yet-wsj-reports-2025-01-20/">trade and tariff policies</a> impact your supply chain and materials/goods costs?</li>



<li>How could the rollback of <a href="https://www.forbes.com/sites/rrapier/2025/01/21/president-trumps-first-day-key-energy-executive-orders-issued/">energy and environmental policies</a> create longer-term risks for your organization (e.g., potential inflationary effects of lower energy prices, legal liabilities, <a href="https://www.reuters.com/world/us/trumps-climate-withdrawal-creates-rare-discord-with-big-oil-2025-01-22/">international trade/policy challenges</a>, investor/stakeholder pressures)?</li>



<li>Will immigration policies impact your industry/organization’s labor pool and costs?</li>
</ul>



<p>An era of deregulation is both an imperative and an opportunity for organizations to look at the risks they face with fresh scrutiny. It’s also a chance to reassess risk management and oversight.</p>



<p>I’ve written a great deal about how the ongoing age of permacrisis mandates risk management transformation. Deregulation only ups the ante, putting the onus on your organization. Just because you don’t have to manage a risk doesn’t mean you shouldn’t. Make sure your organization’s key stakeholders maintain a strategic view of the road ahead.</p>



<p><em>The opinions expressed in Fortune.com commentary pieces are solely the views of their authors and do not necessarily reflect the opinions and beliefs of Fortune.</em></p></div>

Deregulation makes your company’s risk management strategy more important, not less.

Deregulation removing compliance requirements doesn’t mean underlying risks go away

<br><br><b>Did your workplace make our list of the World's Most Admired Companies?
<a href="https://fortune.com/ranking/worlds-most-admired-companies/?&itm_source=fortune&itm_medium=article_tout&itm_campaign=DecJanMag">Explore this year's list.</a>
</b><br><br><br><br>

F-Partnership

Finance

Commentary

Deregulation removing compliance requirements doesn’t mean underlying risks go away | Fortune

Steve H. Hanke

Caleb Hofmann

China's Premier Li Qiang prepares to speak at the National People's Congress in Beijing last week.

China has only one real way to hit its 2025 growth target

/2025/03/11/china-gdp-economy-stimulus/

Rosan Roeslani

Rosan Roeslani, Indonesia's minister of investment.

Indonesia’s new sovereign wealth fund—at nearly $1 trillion—heralds an economic powerhouse taking full control of its resources

/2025/03/11/indonesia-danantara-sovereign-wealth-fund/

Jane Hoffman

‘Corporate social responsibility’ is a flawed concept. What we really need is ‘corporate accountability’

/2025/03/10/corporate-social-responsibility-accountability/

Michelle Werner

My son’s rare disease diagnosis spurred me to ditch Big Pharma for a biotech startup

/2025/03/10/rare-disease-big-pharma-biotech-startup/

Josh Hoffman

Kevin Katari

The California crisis in homeowners insurance has only one real solution

/2025/03/10/california-homeowners-insurance-crisis/

Cully Cavness

AI innovation isn’t a climate threat, it’s our best hope

/2025/03/10/ai-climate-change-energy-tech/

Ani Freedman

This gastroenterologist says probiotics are 'a waste of money.' Here’s what you should be doing instead

https://fortune.com/well/article/probiotics-bloating-gut-health-fiber-diet/?itm_source=parsely-api

Sasha Rogelberg

Fired NIH workers fear bleak job prospects in the private sector because their research is too specific to be retrofitted: 'No VC is going to fund that'

https://fortune.com/2025/03/11/fired-nih-workers-bleak-jobs-private-sector/?itm_source=parsely-api

Phil Wahba

Here’s why the CEOs of major retailers like Walmart, Gap and Target are sounding so calm about Trump’s tariff standoff

https://fortune.com/2025/03/10/trump-tariffs-retail-ceos-react-soun-calm-walmart-gap-target-home-depot/?itm_source=parsely-api

https://fortune.com/2025/03/10/california-homeowners-insurance-crisis/?itm_source=parsely-api

Nicholas Gordon

Tesla loses $127 billion in one-day market bloodbath as China car group questions Musk’s pursuit of ‘personal glory’

https://fortune.com/asia/2025/03/11/tesla-shares-drop-china-byd-ev/?itm_source=parsely-api

Amanda Gerut

Larry Ellison’s Oracle just reported $130 billion in future contracts—which doesn’t include even a single transaction from Stargate

https://fortune.com/2025/03/11/larry-ellison-oracle-stock-future-revenue-stargate-ai-nvidia/?itm_source=parsely-api