Reading the Rules: How to Audit Regulatory Risk Before You Commit

You're scoping a new market. You've got the growth numbers, the trend lines, the competitor map. But have you checked the rulebook? Because regulatory shifts can flip a market's attractiveness overnight. This is for anyone doing serious industry analysis—whether you're an investor, a strategist, or a founder deciding where to build. I'll walk you through a five-step audit that forces the regulatory question into the open.

1. Start with the Market Definition, Not the Headlines

Analysts define the industry, survey total sales and growth, and distinguish the total market from the strategically relevant market (SRM) (CFA Institute). That's your first move: draw the boundary. The total market is the whole pie; the SRM is the slice you can actually play in. Now ask: where does regulation bite hardest? In pharma, it's clinical trials and pricing. In media, it's data privacy and content rules. Get specific.

For example, the global insights industry—the market research and analytics business—hit over US$140 billion in 2023 and was expected to surpass US$150 billion by 2024 (ESOMAR via Research World). That's the total. But your SRM might be research software, which grew 12.4% in 2023 (ESOMAR via Research World). Regulatory changes around data sharing hit that segment differently than they hit full-service research shops. Know your slice.

2. Run the Five Forces with a Regulatory Lens

Porter's Five Forces analyzes the level of competition within a market through threat of new entrants, substitutes, supplier power, buyer power, and competitive rivalry (CFA Institute). The stronger the forces, the lower the industry's profit potential (CFA Institute). Now, overlay regulation. Every force has a regulatory component.

Take the threat of new entrants. Regulators can raise or lower the bar. In the US, the antitrust guidance uses the Herfindahl-Hirschman Index (HHI) to measure market concentration. Under the 2023 Merger Guidelines, a market is 'highly concentrated' when the HHI exceeds 1,800, and a merger that pushes the index up by more than 100 points in such a market is presumed unlawful (US DOJ Antitrust Division). If you're entering a market with a dominant player, that rule is your moat. It can also be your trap if you're the one trying to merge.

Supplier power? Regulations on raw material sourcing can shift leverage. Buyer power? Consumer protection rules can change switching costs. Substitutes? Environmental regulations can make one technology cheaper and another obsolete. Don't just list the forces—ask how each is shaped by the current and pending rulebook.

3. Add PESTLE to Catch the Macro Waves

The CFA Institute recommends using both Porter's Five Forces and PESTLE to understand the external environment (CFA Institute). PESTLE examines Political, Economic, Social, Technological, Legal, and Environmental macro-factors (CFA Institute). For regulatory impact, the political and legal factors are your direct concerns—government policies, tax policy, regulation and deregulation trends (Washington State University Libraries). But don't ignore the environmental side. It's grown in importance because of scarcity of raw materials, pollution targets, and the push for sustainability (Washington State University Libraries).

In the insights industry, think about data privacy. That's a legal factor, but it's also social—consumer attitudes toward data collection are shifting. And it's technological—new tools like AI are entering the mix. About 47% of researchers globally use AI regularly in market research (Similarweb / Research and Markets). That's a technological shift with regulatory implications. If you're building a research software product, you need to know which AI uses are allowed and which are heading for restriction.

4. Check the Concentration Stats—But Use Them Wisely

Market concentration is a regulatory red flag. The HHI is straightforward: it's the sum of the squares of market shares, approaching zero in fragmented markets and hitting 10,000 in a monopoly (US DOJ Antitrust Division). Use it to assess your competitive position and to anticipate antitrust scrutiny. But remember: concentration is not the whole story.

In the global market research industry, the US holds about 53% of the market (Similarweb / Research and Markets). That's a concentrated market on a global scale. If you're entering that space, expect intense rivalry and possibly regulatory attention. On the other hand, Asia Pacific is the fastest-growing region, growing about 9.5% in 2023 compared to 8.0% globally (ESOMAR via Research World (Asia Pacific)). That growth might come with different regulatory regimes—some more open, some less. Know the local rules.

5. Stress-Test Your Strategy Against the Rulebook

Finally, take your growth strategy and run it through the regulatory filter. The Ansoff matrix pairs existing or new products with existing or new markets (Duke University CMO Survey). In the Duke survey, market penetration was the most-used strategy at 54.1% (Duke University CMO Survey). That's fine, but penetration in a regulated industry might hit a wall if the rules cap your pricing or your market share.

Consider a concrete example: you're a research software company in Asia Pacific. You plan to expand from your home market into Vietnam, which grew 17.2% in 2023 (ESOMAR via Research World (Asia Pacific)). That's a market development move. But Vietnam's data localization laws might force you to store data locally, increasing costs. Or Kazakhstan, growing at almost 24% (ESOMAR via Research World (Asia Pacific))—maybe the regulatory environment is more permissive. Run each scenario through the Five Forces and PESTLE, and adjust your playbook accordingly.

What can go wrong: You ignore the regulatory angle, bet big on a market that looks attractive on growth, and then a rule change wipes out your margin. It happens all the time. Don't let it happen to you.

The Bottom Line

Regulatory impact is not a box to tick—it's a core part of industry analysis. Start with the market definition, run the Five Forces with a regulatory lens, add PESTLE for the macro waves, check the concentration stats, and stress-test your strategy. Do that, and you'll see the opportunities that others miss—and avoid the traps that catch the unprepared.

Remember: the stronger the five forces, the lower the profit potential. Regulation can strengthen or weaken those forces. Make sure you know which way it's blowing.

Sources

• CFA Institute - https://www.cfainstitute.org/insights/professional-learning/refresher-readings/2026/industry-and-competitive-analysis
• Similarweb / Research and Markets - https://www.similarweb.com/blog/research/market-research/market-research-stats/
• Washington State University Libraries - https://libguides.libraries.wsu.edu/c.php?g=294263&p=4358409
• US DOJ Antitrust Division - https://www.justice.gov/atr/herfindahl-hirschman-index
• ESOMAR via Research World - https://researchworld.com/articles/drivers-of-our-142bn-insights-industry
• ESOMAR via Research World (Asia Pacific) - https://researchworld.com/articles/the-remarkable-ascent-of-asia-pacific-in-global-insights