It would be interesting to apply a varying degree of regulation based on an organizations size/revenue.

Startups less regulation, global conglomerates more regulation.