One could argue that unenforced regulation (and a thereby non-compliant organization) is not that different from nonexistent regulation.