Regulatory guidance (Layer 3)
Published explanations of how an authority expects its rules to be met. The third layer: often not law, but routinely what examiners check.
Overview
Guidance takes many forms: interpretive guidance, bulletins, guidelines, FAQs, Q&As, Dear CEO letters and handbook guidance. Examples include CFPB guidance, OCC bulletins, OSFI guidelines, FCA guidance, EDPB guidelines and OPC guidance.
Guidance often explains how authorities expect compliance to be implemented, and it changes much faster than statute or regulation.
It connects most directly to The five layers of obligation, Interpretive guidance, OCC bulletins, OSFI guidelines and EDPB guidelines.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Guidance can change what “compliant” means for a control you already run, without any change in the law.
Who it affects
All regulated organisations; especially those under active supervision.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Layer 3. Select one to open it.
What to do about it
- 1Tag every obligation with the layer it came from.
- 2Watch the faster-moving layers more closely.
- 3Trace each lower-layer obligation back to its source.
From requirement to evidence.
Guidance is tracked as layer three. When it lands, Drafter writes an impact note redlining every affected control.
Request early access →