What Is Regulatory Tracking?
Watching when and how the rules that bind your organisation change: who does it, why it is harder than it looks, and where it can be automated.
Regulatory tracking is the practice of monitoring the publication, amendment and repeal of the legal and regulatory rules that bind an organisation. The point is not to be aware, it is to be aware in time: when an obligation takes effect, the organisation has to be ready for it.
What gets tracked is not one kind of document. In Turkish law, rules sit in a hierarchy and no layer may contradict the one above it.
What you are actually tracking
| Layer | What it is | Why it matters for compliance |
|---|---|---|
| Constitution | The highest norm | Rarely changes, but when it does everything beneath it moves |
| Law | Passed by parliament | The source of the obligation; penalties usually live here |
| Presidential decree | Introduced by the 2017 constitutional amendment | Where it conflicts with a law, the law prevails |
| Regulation | Sets out how a law is applied | Most operational obligations originate here |
| Communiqué, circular, directive | Secondary legislation | The layer that changes most often, and the one that touches daily work |
This ordering is the general frame; which norm governs a specific dispute is a legal question.
Whose job it is
In most organisations regulatory tracking is not one person's job, but when no one owns it, it becomes nobody's. In practice it sits in three places: the compliance function reads and interprets the rule, the legal function assesses whether it binds, and the affected business unit does what it requires. In regulated sectors, the existence and duties of a compliance function are themselves set out in the rules that govern that sector.
The critical point: the output of tracking is not an email, it is an assigned task. If a change has been noticed but nobody knows who does what about it, the tracking has not happened.
Why it is harder than it looks
The sources are scattered. A bank is bound simultaneously by the banking regulator, the central bank, the financial crimes body, the data protection authority and the official gazette; capital markets work adds the securities regulator and the disclosure platform. Each has its own publication rhythm, its own page, its own announcement format.
The schedule is unpredictable. A same-day supplementary issue can be added on top of the regular one. Checking once a day is not enough. See what the Official Gazette is.
Volume is high, relevance is low. Most of what is published does not bind you. The real work is separating what does, and working out who inside the organisation it concerns. This is where compliance teams lose most of their time, before the actual work starts.
Entry into force is a separate problem. The publication date and the effective date are not the same, and transitional provisions can stage an obligation. Missing the deadline has the same consequence as missing the rule.
What automation changes
Automation does not remove the reading, it removes the sorting. QRegu continuously monitors 26+ regulators and official sources; every new rule passes through automatic impact analysis — severity, affected departments, effort in working days, deadlines extracted from the text — and workflow automation turns it into a task with an owner and a due date. A regulator not yet covered is added through the Discovery Agent without a developer.