# Regulatory changes · Use cases · Dscvry

> Apply Dscvry to regulatory change: split a new rule into obligations, map each to the policies and controls that cover it, and flag what must change.

Source: https://dscvryai.com/use-cases/regulatory-changes/

# What does this new rule change for us?

Know what the new rule means for you. Every clause. Every policy. Every change.

See it worked through ·

1. [Home](https://dscvryai.com/)
2. [Use cases](https://dscvryai.com/#use-cases)
3. Regulatory changes

## The rule changed. Which procedures did?

New regulations arrive as long documents. Working out which clauses apply, which policies and procedures they touch, and what has to change is weeks of careful reading.

### Long documents, fixed deadlines.

Hundreds of pages to read against a compliance date that doesn’t move.

### Mapped by hand.

Each clause is traced to internal documents from memory, one spreadsheet at a time.

### Gaps found by the regulator.

The obligation nobody mapped is the one that surfaces in an inspection.

## What the AI reads.

The new rule, clause by clause, set against every policy, procedure and control you already have.

### In

- New regulation
- Guidance & FAQs
- Policies
- Procedures
- Controls
- Previous version

### At work

1. [Sense](https://dscvryai.com/technology/sense/) Reads the new rule, its guidance and your documents.
2. [Understand](https://dscvryai.com/technology/understand/) Splits the rule into specific, testable obligations.
3. [Check](https://dscvryai.com/technology/check/) Maps each obligation to the policy or control that covers it.
4. [Anticipate](https://dscvryai.com/technology/anticipate/) Flags compliance dates and the changes they depend on.
5. [Operate](https://dscvryai.com/technology/operate/) Opens change tasks with owners and deadlines.

### Out

One impact map. Every mapping cites both texts.

## Every obligation. Mapped to what you do.

Compliance teams see which duties are already covered, which documents need to change and where nothing covers the rule at all.

Impact map · Why it's a gap · Change plan ·

Impact map · Operational Resilience Rules (illustrative) Illustrative

**8** covered · **2** updates needed · **1** gap

| Article | Obligation | Status | Covered by | Owner |
|---|---|---|---|---|
| Data & records | | | | |
| 5.1 | Keep operational records for 6 years | Covered | Retention policy RP-03 §2 | Compliance |
| 5.2 | Delete personal data on request | Covered | Privacy procedure PR-11 | Data protection |
| 5.4 | Log changes to critical systems | Covered | Change control CC-02 | IT |
| Incidents & suppliers | | | | |
| 6.4 | Report major incidents within 24 hours | Update | Incident procedure IR-07 says 72 hours | Risk |
| 6.6 | Test incident plans every year | Covered | Continuity test schedule | Risk |
| 7.2 | Audit critical suppliers every year | Gap | No procedure or control covers this | Procurement |
| 7.3 | Keep a register of critical suppliers | Covered | Supplier register SR-01 | Procurement |
| People & access | | | | |
| 8.1 | Review privileged access quarterly | Covered | Access review control AC-04 | IT |
| 8.3 | Remove leavers' access within a day | Covered | Joiners-movers-leavers JML-2 | IT |
| 9.3 | Train staff on resilience every year | Update | Training covers security, not resilience | HR |
| 9.4 | Name an accountable executive | Covered | Board minutes, March | Company secretary |

Illustrative example. The rule, articles, documents and dates are fictional.

## Built for the regulator’s questions.

When the regulator asks how you know, the answer is already written down.

### Both texts, side by side.

Every mapping shows the rule’s words and your document’s words together.

How Understand works
https://dscvryai.com/technology/understand/

### Nothing silently assumed.

Where nothing covers an obligation, it says so rather than guessing a match.

How Check works
https://dscvryai.com/technology/check/

### Deadlines tracked.

Compliance dates and the changes they depend on stay visible until done.

How Anticipate works
https://dscvryai.com/technology/anticipate/

## Same records. Other problems.

The documents behind compliance answer other questions too.

Did they deliver what the contract says?

### Contract compliance

See whether obligations were actually met.

See how →
https://dscvryai.com/use-cases/contract-compliance/

What here isn’t safe?

### Safety checks

Flag what’s unsafe or incomplete.

See how →
https://dscvryai.com/use-cases/safety-checks/

What actually happened with this complaint?

### Customer complaints

Reconstruct what happened, and how it was handled.

See how →
https://dscvryai.com/use-cases/customer-complaints/

Is the supplier’s evidence complete?

### Supplier quality

Find missing or inconsistent evidence.

See how →
https://dscvryai.com/use-cases/supplier-quality/

Compliance solution
https://dscvryai.com/solutions/compliance/

More in Quality & safety
https://dscvryai.com/#use-cases

Every use case
https://dscvryai.com/use-cases/

## Bring us the next rule you’re facing.

Send the text and your policies. We’ll show you the impact map the AI builds.

[Talk to us →](https://dscvryai.com/contact/?topic=Regulatory%20changes%20inquiry)

**London**Discovery AI Limited · United Kingdom

**Hyderabad**ReDscvry Technology Private Limited · India

**Chennai**ReDscvry Technology Private Limited · India