For many companies, regulation still feels like a future problem. In practice, it is already an operational one.