Reference · Phase 3 — Go-to-Market & Execution

Regulatory & Risk Playbook

Load when regulatory perimeter, network/platform rules, data/consent, financial crime, risk register.

Part of the Product Strategy skill · loaded on demand from SKILL.md

Part of the product-strategy skill. See SKILL.md for the workflow spine and when to load this file.

XI. Regulatory & Risk Playbook

Purpose

Identify legal, regulatory, compliance, operational, and strategic risks early enough to shape product design and launch sequencing.

A. Regulatory Perimeter

Relevant domains may include:

  • Payments
  • Lending or credit
  • Banking
  • E-money
  • Money transmission
  • MSB / PSP rules
  • Insurance
  • Securities
  • Data protection
  • Consumer protection
  • Advertising and marketing claims
  • Competition / antitrust
  • Sector-specific licensing
  • Accessibility
  • Tax
  • Cross-border rules

B. Network, Platform, or Ecosystem Rules

Relevant considerations may include:

  • Platform terms
  • Network rules
  • App store policies
  • Marketplace rules
  • Routing requirements
  • Co-badge requirements
  • Interchange caps
  • Data sharing rules
  • Partner compliance requirements
  • Brand usage rules

Assess:

  • Data collection
  • Data minimization
  • Data usage
  • Consent
  • Personalization
  • Third-party sharing
  • Cross-border transfers
  • Data retention
  • Customer rights
  • Model governance
  • Privacy disclosures
  • Security requirements

D. Financial Crime and Abuse

Where relevant, assess:

  • KYC / KYB
  • AML screening
  • Sanctions screening
  • Transaction monitoring
  • Fraud detection
  • Suspicious activity reporting
  • Account takeover
  • Synthetic identity
  • Abuse and misuse
  • Model risk
  • Manual review operations

E. Product-Specific Risk

Assess:

  • Disclosure
  • Marketing claims
  • Pricing fairness
  • Hidden fees
  • Customer harm
  • Suitability
  • Complaints
  • Refunds
  • Disputes
  • Chargebacks
  • Accessibility
  • Vulnerable customers
  • Operational resilience

F. Broader Risk Register

Track risks across:

  • Market risk
  • Customer adoption risk
  • Pricing risk
  • Unit economics risk
  • Competitive response risk
  • Cannibalization risk
  • Regulatory risk
  • Technology risk
  • Operational risk
  • Partner risk
  • Vendor lock-in risk
  • Brand risk
  • Data privacy risk
  • Security risk
  • Model / AI risk
  • Execution capacity risk

Risk Register Template

RiskProbabilityImpactOwnerMitigationEarly Warning SignalDecision Trigger