How to Run a Regulatory Impact Analysis Without Fooling Yourself

How do I actually account for regulation in an industry analysis without turning it into a legal memo?

If you're an analyst, strategist, or consultant who has to produce a defensible read on an industry, this is for you. We don't need another theory dump. We need a repeatable way to decide whether a rule helps or hurts the economics of the business we're looking at.

1. Start with the question you're really answering

Regulation isn't a checkbox. It's a force that changes who captures value. Before you open a single legal document, write down the decision you're supporting: Are we entering? Are we pricing? Are we worried about a merger? The answer determines which rules matter and which are noise. In our shop, we refuse to start until the client names the decision. Otherwise you get a 40-page PESTLE that nobody uses.

2. Map the regulatory environment with PESTLE, then stop

Use PESTLE to scan Political, Economic, Social, Technological, Legal, and Environmental factors. The legal and political buckets are where regulation lives. Political factors include government policies, tax policy, and regulation or deregulation trends. Legal factors include health and safety, advertising standards, consumer rights, and product labeling and safety. That's your raw list. Don't analyze yet—just inventory. A common mistake is to treat every rule as equally important. They aren't. A labeling change is not the same as a pricing cap.

3. Translate each rule into a Five Forces impact

This is where most analyses go soft. A regulation matters only if it changes one of the five forces. Porter's framework—threat of new entrants, substitutes, supplier power, buyer power, and rivalry—determines how economic value gets apportioned. The stronger the forces, the lower the profit potential. So for each rule, ask: Does it raise or lower entry barriers? Does it shift switching costs? Does it strengthen buyers or suppliers?

Example: A new data localization rule that requires servers in-country raises capital requirements for new entrants. That's a barrier to entry. It also raises switching costs for customers because moving data is painful. Both reduce the threat of entry. But the same rule might increase supplier power if only two compliant vendors exist. You have to trace it through.

4. Quantify concentration—because regulators already do

When a rule touches mergers or market structure, use the Herfindahl-Hirschman Index. The HHI is the sum of squared market shares. It approaches zero in fragmented markets and reaches 10,000 in a monopoly. Under the US 2023 Merger Guidelines, a market is moderately concentrated between 1,000 and 1,800, and highly concentrated above 1,800. A merger that pushes HHI above 1,800 and adds more than 100 points is presumed unlawful (US DOJ Antitrust Division).

Concrete example: Four firms with 30%, 25%, 25%, and 20% shares give an HHI of 900 + 625 + 625 + 400 = 2,550. That's already highly concentrated. If the top two merge, the new HHI is 3,025 + 625 + 400 = 4,050, an increase of 1,500 points. Any analyst who ignores that number is not doing industry analysis; they're doing PR.

5. Check the self-regulatory layer—it still bites

Not all regulation is government-made. The ICC/ESOMAR International Code, established in 1977, is the global benchmark for self-regulation in market research. It's mandatory for Esomar members and endorsed by over 60 associations in more than 50 countries. Its five core principles require research to be legal, honest, transparent, and truthful; researchers must clearly communicate how personal data will be used; and researchers bear overall responsibility regardless of method or technology (ICC/ESOMAR International Code).

If you're analyzing the insights industry, this code is a real force. It raises the cost of entry for fly-by-night panels and gives incumbents a trust advantage. That affects rivalry and buyer power.

6. Watch for the 'stuck in the middle' regulatory trap

Regulation can push firms toward generic strategies they can't execute. If a rule forces higher compliance costs, some firms try to be both cheap and differentiated. That's a recipe for being stuck in the middle—offering neither unique features nor competitive pricing. Porter noted strategy is as much about what you won't do as what you will do. In regulated industries, we see this constantly: a mid-sized player adds compliance overhead but doesn't raise prices or cut costs enough to matter. The result is poor performance.

Warning: Don't assume compliance is always a cost. Sometimes it's a moat. The trick is deciding which side you're on.

7. Use complements and strategic groups to see the whole board

Brandenburger and Nalebuff argue that complements—products used together with yours—should be treated as a force on the same footing as substitutes. A hardware industry needs a software industry to flourish. Regulation often hits complements first. If a new privacy rule restricts data sharing, it may weaken complementors before it touches you directly.

Also map strategic groups. Firms in the same group follow similar competitive approaches. Regulation can create mobility barriers that lock firms into a group. A firm that suddenly faces a new licensing requirement may find it can't move to a different group without huge cost. That's a strategic fact, not a legal footnote.

Quick tip: When you present findings, show the regulation's effect on one force at a time. Decision-makers can argue with a force. They can't argue with a 60-page appendix.

What I'd actually do

If you take one thing from this, take the HHI habit. For any industry where regulation touches market structure, calculate the HHI before and after the rule. It takes ten minutes and forces you to be specific. Then run a PESTLE scan to catch the legal and political factors you'd otherwise miss, and translate each one into a Five Forces impact. Finally, check whether the rule creates a moat or just a bill. My recommendation: never deliver a regulatory analysis without a clear statement of which force changed and by how much. If you can't name the force, you don't have an analysis—you have a summary.

Sources

• CFA Institute - https://www.cfainstitute.org/insights/professional-learning/refresher-readings/2026/industry-and-competitive-analysis
• US DOJ Antitrust Division - https://www.justice.gov/atr/herfindahl-hirschman-index
• ICC/ESOMAR International Code - https://iccwbo.org/news-publications/business-solutions/iccesomar-international-code-market-opinion-social-research-data-analytics/
• Harvard Business Review (Porter 2008) - https://hbr.org/2008/01/the-five-competitive-forces-that-shape-strategy
• Brandenburger & Nalebuff (Yale SOM paper) - https://som.yale.edu/sites/default/files/2024-12/1-SYMMETRY-AND-THE-SIXTH-FORCE-THE-ESSENTIAL-ROLE-OF-COMPLEMENTS-Adam-Brandenburger-Barry-Nalebuff%202.pdf