Legislatures pass laws in general terms and delegate the detail. That detail is where most of the practical effect lies, and the process producing it is largely invisible.
Delegated authority
Legislation establishes a purpose and grants an agency authority to make rules achieving it.
Which is necessary given the technical complexity of most regulation, and it transfers substantial power to unelected officials.
The scope of delegation is a recurring constitutional question in many systems, with courts periodically constraining how broadly authority can be granted.
Rulemaking
The process typically involves publishing a proposed rule, accepting public comment, considering the comments, and publishing a final rule with an explanation.
Which is a genuine consultation process producing thousands of pages of response in significant cases.
Agencies must generally respond to substantive comments, and failure to do so is grounds for legal challenge.
The comment process is open to anyone, and organised interests participate far more than individuals.
Cost-benefit analysis
Required for significant rules in many systems.
Which quantifies expected costs and benefits, and the methodology involves substantial judgement.
Valuing outcomes that are not traded — health, environmental quality, time — requires methods that are contested.
The discount rate applied to future benefits is particularly consequential for rules with long-term effects, and small changes in it produce large changes in the conclusion.
Judicial review
Rules can be challenged in court on grounds including exceeding statutory authority, procedural failure and arbitrary reasoning.
Which is a substantial constraint, and a large proportion of significant rules are litigated.
The degree of deference courts give to agency interpretation of ambiguous statutes has been a major and shifting question in several legal systems.
Enforcement
Writing a rule is separate from enforcing it.
Which depends on resources, priorities and, in many systems, on complaints being made.
Enforcement priorities change with administrations without any change in the rules, which is a substantial source of policy variation that receives less attention than rule changes.
Capture
The concern that agencies come to serve the interests they regulate.
Mechanisms proposed include information asymmetry, since the industry knows more; the revolving door between agency and industry employment; and the sustained attention of concentrated interests against diffuse public interest.
Evidence for capture varies by agency and by period, and the theoretical mechanisms are well established.
Independence
Some agencies are structured for independence, with fixed terms and removal protections.
Which is intended to insulate technical decisions from short-term political pressure.
The extent of executive control over such agencies has been litigated repeatedly and remains contested.
How to follow it
Proposed and final rules are published in official registers, searchable and free.
Which includes the reasoning and the response to comments, and it is considerably more informative than coverage of the announcement.
Comment periods are open to the public, and substantive comments are given weight regardless of who submits them.
Guidance
Documents explaining how an agency interprets rules, issued without formal rulemaking.
Which is faster and provides clarity to regulated parties.
The concern is that guidance can function as a binding rule while avoiding the procedural requirements, and courts have examined this repeatedly.
Agencies generally state that guidance is not binding, and regulated parties treat it as such because departing from it invites enforcement.
Enforcement discretion
Decisions not to enforce are generally harder to challenge than decisions to act.
Which means an agency can effectively suspend a rule by declining to enforce it, without any formal change.
This has become a significant mechanism of policy change and is difficult to constrain legally.
Resources
Agency capacity determines what is actually done regardless of authority.
Which means budget decisions are policy decisions, and reductions in enforcement staffing have measurable effects on compliance.
Comparing an agency's mandate against its staffing is frequently informative about what will happen in practice.
International coordination
Regulators cooperate across borders through formal networks and informal contact.
Which matters for regulated activities that cross borders, including finance, aviation, pharmaceuticals and data.
Mutual recognition of approvals reduces duplication and requires confidence in the other regulator.
Standards bodies
Technical standards are frequently developed by private organisations and then referenced in regulation.
Which effectively gives those bodies regulatory force, and their governance and openness vary.
Participation in standards development is expensive, which means the parties present are generally the larger regulated firms.
Sunset and review
Requirements to review rules periodically or to expire them absent renewal exist in some systems.
Which addresses accumulation of obsolete regulation and imposes substantial ongoing work.
Small business impact
Compliance costs fall disproportionately on smaller firms, since fixed costs of compliance do not scale with size.
Which is why many frameworks include exemptions or simplified regimes below size thresholds.
Threshold effects can discourage growth across the boundary, which is a documented consequence.
Which means regulatory design has to weigh compliance burden alongside the objective, and impact assessments generally address it explicitly.