This. New regulations and compliance issues are best dealt with by large corporations. They have the lawyers and accountants to digest the regulations, they have the money to hire more employees and have existing employees to divert to handle new requirements. Smaller companies do not have that luxury. We are the ones that have to figure out what is going on and then finding some way to deal with it. Who handles SOX compliance better, the company with 15,000 employees or the one with 200? Who handles GLBA compliance better? HIPPA?
Do the regulations even do anything? What does the nameless bureaucrat who devised the rule know about your industry? What do the regulations even do or serve?
My next door neighbor rails on about OSHA inspectors at his facility. Would you like to know why? They come in and measure railings and test for this and that and somehow they always find an issue. It doesn't matter that something may have been there for years or may have been done a certain way for years and any number of other inspectors have never said a word about it, a new inspector comes in and says "oh, that's wrong, change it" and they have to deal with it. And that happens because there are 1,000's of rules that affect his facility and no one knows them all. My neighbor and his team do not know them all, nor do the various OSHA people who come through the door. But what really sets him off is that they never, NEVER, ask about the actual safety at his facility. They have never, ever asked about incidents or accidents. Never asked any salient questions about safety procedures and how it relates to what the facility does. All they want to know is are the forms filled out correctly, are the material data safety sheets properly placed on the barrels of chemicals, are there signs where they should and are they hung at the right height, and on and on. The times where there have been an incident, did the OSHA rep want to know more about it and what happened? Nope, just wanted to make sure the form was filled out correctly then re-filed it. Did they actually read it? Nope, just wanted to make sure all the boxes were filled out and dated correctly.
And I am not beating on OHSA, they did some worthwhile things long ago. However, the fact is the vast majority of accidents are caused by human error. And no amount of rules and regulations are going to stop human error. But that is the problem with all the regulations, all it does is create paperwork. All the enforcement is concerned about is the paperwork. When an issue occurs all anyone is concerned about is the paperwork. And before you even mention it, this sometimes is to the benefit of the transgressor. They can look back and say 'we know we had an issue/accident/problem, but it wasn't our fault as we did everything by the book, look at the paper trail".