/"Regulatory" strongly implies externally supplied guidelines in my view.... i.e. by the official "Regulator" in a country. But again, "guidelines" is the key word here. Regulators may provide "guidelines" which are inherently subject to interpretation and therefore potentially differing enforcement processes and practices by different banks/card issuers.