Policies addressing legal or regulatory issues help you meet or exceed industry, regional, and/or national requirements. Legal requirements, like rules on accessibility or personal info, generally apply across industries. Regulatory requirements are industry specific, such as regulations on advertising prescription drugs. Both differ by industry and country. Whether or not you choose to address a specific legal or regulatory risk with an organizational policy, your organization should at least discuss it and potential consequences.