Contents
Regulatory shifts are among the most reliable creators of new markets. This framework treats changes in law, licensing, and compliance requirements not as obstacles but as starting signals — moments when entire categories of economic activity become legal, permissible, or commercially viable for the first time, and the founders who move fastest capture outsized share.
Section 1
How It Works
The core insight is that regulation is a dam, and regulatory change is the moment the dam breaks. Behind every prohibition or restriction sits pent-up demand — consumers who want a product, operators who want to build it, and capital that wants to fund it. When the regulation shifts, all three rush into the newly opened channel simultaneously. The founders who anticipated the change and pre-built for it capture the initial flow. Everyone else is left scrambling to catch up.
This works because regulatory change creates a rare market condition: a known demand with a sudden supply unlock. In most markets, you have to guess whether demand exists. When cannabis becomes legal in a new state, you don't have to guess — the illicit market already proved the demand. When the FDA clears a new category of direct-to-consumer health testing, you don't have to guess — the waiting lists at clinics already proved the demand. The regulation was the only thing standing between the customer and the product. Remove it, and the market materializes almost instantly.
The mechanism has three phases. First, anticipation: tracking legislative pipelines, regulatory comment periods, court rulings, and political signals to identify which restrictions are likely to change and when. Second, pre-positioning: building the product, securing licenses, establishing compliance infrastructure, and lining up distribution before the change takes effect. Third, sprint: launching the moment the regulatory window opens, capturing early users, and building brand trust as the "safe" or "compliant" option in a category where trust is scarce.
— Wayne Gretzky, frequently cited by business strategists"I skate to where the puck is going to be, not where it has been."
The asymmetry this exploits is informational and operational. Most entrepreneurs react to regulatory change after it happens. The ones who profit most are those who treated the regulatory pipeline as a product roadmap — reading proposed rules the way a product manager reads a feature request backlog. The information is public. The legislative calendars are public. The lobbying disclosures are public. Yet remarkably few founders treat regulatory intelligence as a core competency.
Section 2
When to Use This Framework
✓
Best Conditions for Regulatory Unlock
| Dimension | Ideal conditions |
|---|---|
| Founder profile | Former regulators, policy lawyers, compliance officers, or industry insiders who understand the regulatory machinery from the inside. Domain expertise matters more than technical brilliance here — you need to read a Federal Register notice and understand its commercial implications before your competitors do. |
| Stage | Pre-launch through early growth. The framework is most powerful during the 6–24 months before a regulatory change takes effect, when you can build product and compliance infrastructure while competitors are still debating whether the change will happen. Less useful once the market is already open and crowded. |
| Market conditions | Best when there is clear, demonstrated demand being suppressed by regulation — an existing black or grey market, long consumer waiting lists, or adjacent legal markets that prove willingness to pay. Also strong when regulation is changing jurisdiction by jurisdiction (state-by-state legalization), creating a repeatable expansion playbook. |
| Competitive environment | Ideal when incumbents are slow-moving, risk-averse, or structurally unable to enter the new category. Large banks avoided crypto for years. Big pharma ignored direct-to-consumer genetic testing. Legacy casinos were late to online sports betting. Incumbent inertia is your moat. |
| Inputs needed | Legislative tracking tools (GovTrack, LegiScan, state legislature feeds), regulatory comment period databases, lobbying disclosure filings, legal counsel with domain-specific expertise, and relationships with trade associations or industry groups that have visibility into upcoming changes. |
The framework is particularly fertile right now across several domains: AI regulation is crystallizing in the EU (the AI Act took effect in 2024) and will create compliance-driven demand for new tooling; psychedelic-assisted therapy is moving through FDA approval pipelines; state-level cannabis legalization continues to expand; and open banking regulations are unlocking fintech opportunities across Asia and Latin America. Each of these represents a dam about to break — or already breaking.
Section 3
When It Misleads
⚠
Failure Modes & Blind Spots
| Blind spot | What goes wrong |
|---|---|
| Regulatory reversal | You build for a regulatory change that gets rolled back, delayed, or never fully implemented. The 2018 Farm Bill legalized hemp-derived CBD, and hundreds of startups launched — only for the FDA to leave enforcement ambiguous for years, creating a regulatory limbo that killed many of them. Political winds shift. Courts overturn. Agencies change leadership. |
| Compliance cost underestimation | The regulation opens a market but imposes compliance costs so high that only well-capitalized players can survive. Many early cannabis operators discovered that state-by-state licensing, seed-to-sale tracking, and banking restrictions made the business far more capital-intensive than they projected. The regulation unlocked the market but also raised the floor. |
| Demand mirage | The existence of a black or grey market doesn't always translate to a legal market of the same size. Some consumers prefer the unregulated version precisely because it's unregulated — lower prices, no KYC, no taxes. Legal cannabis in some states competes with a thriving illicit market that undercuts on price by 30–50%. |
| Incumbent awakening | You assume incumbents will stay on the sidelines, but the regulatory change is exactly the signal they were waiting for to enter. When the Supreme Court struck down PASPA in 2018, DraftKings had a head start — but FanDuel, backed by Flutter Entertainment's billions, moved just as fast. And legacy casino operators like MGM and Caesars followed within months. |
| Fragmented jurisdiction trap | State-by-state or country-by-country regulatory change sounds like a repeatable playbook, but each jurisdiction has different rules, different licensing requirements, and different timelines. What looks like one market is actually 50 separate markets, each requiring its own compliance stack. This fragments your resources and slows your scaling. |
The single most common mistake is confusing regulatory possibility with regulatory certainty. Founders read a proposed rule, a draft bill, or a favorable court opinion and start building as if the change is guaranteed. But proposed rules die in comment periods. Bills stall in committee. Court rulings get appealed. The discipline is to build in stages — invest heavily in monitoring and positioning early, but delay the most capital-intensive commitments until the regulatory change is irreversible or nearly so.
Section 4
Step-by-Step Process
Step 1 — MonitorTools: GovTrack, LegiScan, Federal Register, state legislature RSS feeds, Westlaw, Bloomberg Law, trade association newsletters
Build a regulatory intelligence pipeline
Treat regulatory tracking like a product manager treats user feedback — systematically, not casually. Set up alerts for specific keywords, bill numbers, and agency dockets. Subscribe to trade association newsletters in your target domain. Follow the lawyers and lobbyists on social media who specialize in your area. The goal is to know about a regulatory shift 12–18 months before the general market does.
Step 2 — AssessTools: Market sizing models, illicit/grey market estimates, adjacent market comps, consumer surveys, lobbying spend analysis
Evaluate the commercial opportunity behind the regulation
Not every regulatory change creates a viable market. Assess the pent-up demand by examining the size of any existing grey or black market, the willingness-to-pay in adjacent legal categories, and the lobbying spend pushing for the change (high lobbying spend signals that well-resourced players believe the market is real). Build a bottom-up market model that accounts for the realistic conversion rate from illicit to legal demand.
Step 3 — Pre-positionDeliverables: Licensing applications, compliance playbooks, legal partnerships, regulatory sandbox participation, pilot programs
Build compliance infrastructure before the market opens
This is where the advantage is built. Apply for licenses early. Hire compliance counsel. Build the reporting and audit infrastructure that regulators will require. If regulatory sandboxes exist (common in fintech), apply to participate. The goal is to be "day one ready" — able to launch legally the moment the regulation takes effect, while competitors are still figuring out the paperwork.
Step 4 — Launch and BrandTools: PR campaigns, educational content, partnerships with established institutions, trust badges, transparency reports
Capture trust as the compliant first mover
In newly regulated markets, consumer trust is the scarcest resource. Position your brand as the safe, compliant, trustworthy option. Coinbase's early branding as the "regulated" crypto exchange was not incidental — it was the core value proposition for mainstream users who were terrified of losing money to a shady operator. Publish transparency reports. Partner with established institutions. Make compliance visible.
Step 5 — ExpandTools: Jurisdiction tracking dashboards, modular compliance architecture, state-by-state launch playbooks
Replicate across jurisdictions as regulation cascades
If the regulatory change is happening jurisdiction by jurisdiction (as with sports betting, cannabis, or open banking), build a modular compliance and launch playbook that can be adapted for each new market. DraftKings built exactly this — a repeatable state-launch process that allowed them to go live within weeks of each new state legalizing online sports betting. The playbook becomes a compounding advantage.
Section 5
Questions to Ask Yourself
Discovery
What regulatory changes are currently moving through legislative or agency pipelines in my domain?
Is there a measurable grey or black market that proves demand exists behind this regulatory barrier?
What is the lobbying spend pushing for this change, and who is spending it?
Are there international precedents where this regulation already changed — and what happened to the market?
Validation
Can I quantify the realistic conversion rate from illicit/unserved demand to legal demand?
Have I spoken with regulatory counsel who can assess the probability and timeline of this change?
What are the compliance costs, and can my business model absorb them while remaining competitive?
Is the regulatory change irreversible, or could a new administration, court ruling, or political shift reverse it?
Execution
Can I secure the necessary licenses and compliance infrastructure before the market opens?
How many jurisdictions will this change affect, and can I build a repeatable launch playbook for each?
Who are the incumbents most likely to enter once the regulation changes, and what is my defensible advantage against them?
Am I building a company that transcends the regulatory moment — or one that only exists because of a temporary window?
Risk
What happens to my business if the regulatory change is delayed by 2+ years?
Could the regulation create compliance costs so high that only the best-capitalized players survive?
Is there a scenario where the regulation changes in a way that's worse for my model than the status quo?
Section 6
Company Examples
C
Coinbase
Built the compliant crypto exchange before regulation clarified
Coinbase launched in 2012 when cryptocurrency existed in a regulatory grey zone — not explicitly illegal, but not clearly regulated either. Brian Armstrong's bet was that regulation would eventually arrive and that the exchange positioned as the most compliant would capture mainstream adoption. Coinbase obtained money transmitter licenses state by state, registered with FinCEN, and built KYC/AML infrastructure that most crypto exchanges considered unnecessary overhead. When institutional investors and retail users began entering crypto in earnest during 2017 and again in 2020–2021, Coinbase was the default "safe" option. The company went public via direct listing in April 2021 at a valuation of roughly $86 billion. The compliance infrastructure that competitors dismissed as bureaucratic overhead became Coinbase's primary competitive moat.
2
23andMe
Navigated FDA approvals to pioneer direct-to-consumer genetic testing
23andMe launched its direct-to-consumer genetic testing kit in 2007, but in 2013 the FDA ordered the company to stop marketing its health-related genetic reports, ruling that the tests constituted medical devices requiring regulatory clearance. Rather than abandoning the health angle, CEO Anne Wojcicki spent years working with the FDA to establish a regulatory pathway for direct-to-consumer genetic health risk reports. In 2017, 23andMe became the first company to receive FDA authorization to market genetic tests for disease risk directly to consumers — covering conditions including Parkinson's disease and late-onset Alzheimer's. This FDA authorization became a moat: competitors could sell ancestry data, but 23andMe was the only player authorized to deliver health risk information without a physician intermediary. The company went public via SPAC in 2021, though it has since faced significant business challenges, illustrating that regulatory advantage alone doesn't guarantee long-term viability.
D
DraftKings
Expanded state by state as sports betting legalized across the U.S.
DraftKings began as a daily fantasy sports platform in 2012, but the real inflection came on May 14, 2018, when the U.S. Supreme Court struck down the Professional and Amateur Sports Protection Act (PASPA), allowing states to legalize sports betting individually. DraftKings had spent years building brand recognition, a user base, and state-level regulatory relationships through its fantasy sports operations — all of which transferred directly to sports betting. The company launched its sportsbook in New Jersey within months of legalization and built a repeatable state-launch playbook that allowed rapid expansion as each new state came online. By 2023, DraftKings was operating in over 20 states and generating approximately $3.7 billion in annual revenue. The key insight: the daily fantasy sports business was never the endgame — it was the pre-positioning vehicle for the sports betting market that DraftKings anticipated would eventually open.
FS
FSA Store & HSA Store
Built retail around tax-advantaged health spending accounts
FSA Store and HSA Store, founded by Jeremy Miller in 2010, capitalized on a regulatory structure that most consumers found confusing: Flexible Spending Accounts and Health Savings Accounts, which allow Americans to use pre-tax dollars for qualified medical expenses. The regulatory framework existed, but consumers struggled to understand what products qualified and where to buy them. FSA Store built a curated e-commerce platform where every product was pre-verified as FSA/HSA-eligible, removing the compliance burden from the consumer. The business grew significantly as the Affordable Care Act expanded HSA adoption and as the CARES Act of 2020 expanded the list of eligible expenses to include over-the-counter medications and menstrual care products. Each regulatory expansion of eligible expenses effectively expanded FSA Store's product catalog overnight — a business model where regulatory change is literally a growth driver.
AD
Anchorage Digital
Built a federally chartered crypto bank to serve institutional clients
Anchorage Digital, founded in 2017 by Diogo Mónica and Nathan McCauley, pursued a strategy even more aggressive than Coinbase's compliance-first approach: it sought and obtained a federal bank charter from the Office of the Comptroller of the Currency (OCC) in January 2021, becoming the first federally chartered digital asset bank in the United States. This charter allowed Anchorage to custody crypto assets under the same regulatory framework as traditional banks — a critical requirement for institutional investors with fiduciary obligations. The company raised a $350 million Series D at a $3 billion valuation in December 2021. The regulatory moat is substantial: obtaining a federal bank charter requires years of preparation, significant capital reserves, and ongoing regulatory examination. Competitors who didn't pursue this path cannot easily replicate it.
Section 7
Adjacent Frameworks
Regulatory unlock rarely operates in isolation. Here's how it connects to the broader strategic toolkit:
Pairs well with
Become compliance expert in area that average Company doesn't have the bandwidth to cover
The natural extension. Once you've navigated a regulatory change yourself, you can productize that compliance expertise and sell it to others entering the same market — turning your cost center into a revenue stream.
Pairs well with
Industry timing arbitrage
Regulatory change is one of the most reliable timing signals in business. Combine regulatory monitoring with broader industry timing analysis to identify moments when regulation, technology, and consumer readiness converge simultaneously.
In tension with
Spot the fringes — what are nerds doing on weekends
Fringe-spotting celebrates the unregulated, experimental edges of culture. Regulatory unlock works in the opposite direction — it waits for the state to formally sanction an activity. The tension: do you build in the grey zone or wait for the green light?
In tension with
Category creation
Category creation builds markets that don't yet exist. Regulatory unlock capitalizes on markets that already exist but are legally suppressed. The risk profiles are inverted: category creation has demand risk but no regulatory risk; regulatory unlock has regulatory risk but minimal demand risk.
Apply next
Niche down
Once the regulatory floodgates open, dozens of competitors will enter. The next move is to niche down — pick the specific customer segment, use case, or geography within the newly legal market where you can build the deepest moat.
Apply next
Be a closer follower of a new category
If you missed the initial regulatory window, the close-follower framework helps you enter the newly legal market by studying what the first movers got right and wrong, then executing a refined version.
Section 8
Analyst's Take
Faster Than Normal — Editorial View
My honest read: this is one of the highest-conviction frameworks in the entire library, but it requires a type of patience that most founders don't have.
The reason it works so well is that regulatory change solves the hardest problem in entrepreneurship — demand validation — before you write a single line of code. When sports betting becomes legal, you don't need to run a survey to find out if people want to bet on sports. When the FDA clears a new category of direct-to-consumer testing, you don't need to A/B test whether consumers want health information. The demand is proven. The regulation was the only barrier. That's an extraordinarily favorable starting position.
But here's what most people get wrong: they treat regulatory change as a moment, when it's actually a process. The Supreme Court struck down PASPA in May 2018, but DraftKings had been building toward that moment since 2012. Coinbase started obtaining state money transmitter licenses years before most people took crypto seriously. 23andMe spent four years working with the FDA after being ordered to stop selling health reports. The founders who win in regulatory unlock are not the ones who react fastest to the headline — they're the ones who spent years reading the regulatory tea leaves and building infrastructure that would only become valuable when the change arrived.
The framework also has a built-in expiration date that founders underestimate. The regulatory moat erodes faster than you think. Being the first compliant player in a newly legal market gives you a 12–24 month window of advantage. After that, well-capitalized incumbents figure out the compliance requirements, hire the same lawyers, and enter with superior distribution and brand recognition. MGM and Caesars were late to online sports betting but caught up quickly because they had existing customer relationships, physical locations, and marketing budgets that DraftKings couldn't match. The lesson: use the regulatory head start to build a second moat — network effects, data advantages, brand trust — before the window closes.
One more thing worth noting: the best regulatory unlock opportunities are often the least glamorous. Everyone sees cannabis legalization and sports betting because they're consumer-facing and culturally visible. But some of the most durable businesses built on regulatory change are in areas like open banking compliance, environmental credit markets, telehealth licensing, and data privacy tooling. These aren't sexy. They don't make TechCrunch headlines. But they create deep, sticky, compliance-driven revenue that's extremely difficult to displace.
Section 9
Opportunity Checklist
Use this scorecard to evaluate whether a specific regulatory change represents a viable business opportunity. Score each item yes (1 point) or no (0 points).
Regulatory Unlock Scorecard
A specific regulatory change is moving through a legislative or agency pipeline with identifiable milestones and timeline.
There is measurable pent-up demand — an existing grey/black market, long waiting lists, or strong consumer interest surveys.
The regulatory change is supported by significant lobbying spend or bipartisan political momentum.
Incumbents in adjacent industries are slow-moving, risk-averse, or structurally unable to enter the new category quickly.
I can begin building compliance infrastructure and securing licenses before the regulation takes effect.
The compliance costs are manageable for a startup — not so high that only large, well-capitalized players can participate.
The regulatory change is cascading across jurisdictions, creating a repeatable expansion playbook.
I have domain expertise, regulatory relationships, or legal knowledge that gives me an informational edge over generalist founders.
There is a clear path to building a second moat (brand trust, network effects, data) beyond the initial compliance advantage.
The regulatory change is unlikely to be reversed within the next 5 years based on political and legal analysis.
I can identify an international precedent where a similar regulatory change created a large, durable market.
Section 10
Top Resources
01
Book
Grove's concept of "strategic inflection points" — moments when the fundamentals of a business change irreversibly — maps directly onto regulatory shifts. His framework for identifying inflection points early and positioning before competitors react is the intellectual foundation for regulatory unlock strategy. Essential reading for any founder building in a regulated domain.
02
Book
Christensen applies disruption theory specifically to healthcare — one of the most heavily regulated industries on earth. The book maps how regulatory changes in healthcare create openings for new business models, from retail clinics to telemedicine. The most relevant Christensen book for founders thinking about regulatory unlock in health, biotech, or insurance.
03
Book
Porter's framework for analyzing industry structure includes barriers to entry as a core force — and regulation is often the most powerful barrier. Understanding how regulatory barriers shape competitive dynamics helps you assess both the opportunity when barriers fall and the sustainability of your position once they do.
04
Book
Hoffman's argument for prioritizing speed over efficiency is directly applicable to regulatory unlock moments, where the window of first-mover advantage is narrow and closing. The chapter on navigating regulatory risk while scaling aggressively is particularly relevant — Uber's playbook of launching in regulatory grey zones is the aggressive counterpoint to the compliance-first approach.
05
Academic paper
Porter's updated treatment of the five forces framework includes extended analysis of how government policy and regulation shape industry profitability. For founders evaluating a regulatory unlock opportunity, this paper provides the analytical toolkit to assess whether the newly opened market will actually be profitable — or whether the regulation creates a market structure where value accrues to someone other than you.
Why this matters next
mental modelsNetwork Effects
Coinbase applied the Network Effects mental model
mental modelsCompounding
Coinbase applied the Compounding mental model
mental modelsMomentum
Coinbase applied the Momentum mental model
mental modelsInertia
Coinbase applied the Inertia mental model
mental modelsFirst-Mover
Coinbase applied the First-Mover mental model
mental modelsIntelligence
Coinbase applied the Intelligence mental model
Continue exploring
RRUNIAACTRND
Framework
Recent funding rounds
Analyze companies that have recently secured significant investment, identifying
Framework
Unbundling
Breaking down a bundled product or service into separate, standalone offerings,
Framework
Industry timing arbitrage
Apply newly developed technology from one industry to another that hasn't yet ad
Framework
Acqui-Deaths
Identify opportunities created when large companies acquire startups, potentiall
Framework
Three-Star reviews
Find business opportunities by analyzing moderately satisfied customers' feedbac
Framework
Niche down
Focus on a highly specific market segment or customer base, becoming a specialis
More like this, in your inbox
I send a newsletter every week — free, no spam, unsubscribe anytime.