Mapping the rules of a sector

Many startup ideas touch regulated areas: money, health, food, insurance, data, transport and education. In these areas, a company usually needs permission to operate, and the rules may limit what it can charge, who it can serve or how it handles customer data. A product that is easy to build can still be slow to launch because of approvals.

Regulation also creates opportunity. Clear licensing keeps out casual competitors. Companies that learn the rules early can build trust with customers and partners. At the same time, a sudden rule change can end a business model, so investors treat regulatory risk as a core part of any pitch in a regulated sector.

Start by listing every authority that could have a say. In India, a few well-known examples are the Reserve Bank of India (RBI) for banks, payments and lending, the Securities and Exchange Board of India (SEBI) for investments and stock markets, the Insurance Regulatory and Development Authority of India (IRDAI) for insurance, and the Food Safety and Standards Authority of India (FSSAI) for food businesses. Telecom, aviation, power and health each have their own authorities too.

Most startups face more than one. A health-and-money app might deal with the health ministry, the RBI and the data protection regime at the same time. State governments also make rules on areas like gig-worker welfare, shops and labour, so check for state differences.

For each regulator, write down the main law or rulebook, the licence or registration needed, and any limits. Limits typically cover foreign ownership, capital a company must hold, the type of customer it can serve, what it can promise in ads and how long records must be kept.

Use primary sources: the regulator's website, official notices and the text of the law. Law-firm explainers help you understand them, but check the date. Write the date you last confirmed each item, and say 'as of' that month. Rules in this area change often, and an old summary can be dangerously wrong.

• Who regulates: name of the authority.
• What is required: licence, registration or none.
• What is limited: ownership, products, pricing, data use.
• What is pending: draft rules or court cases.

Sort what you found into three piles. Clear rules are settled and written down. Grey areas are cases where the rules exist but do not clearly cover the new business. Unsettled areas have draft rules, court cases or proposals that could change things.

Grey areas are where many startups get into trouble, and also where some find an edge. Some run in a grey area with a cautious approach and legal advice. Others partner with a licensed player, such as a bank or an insurer, and offer the product through them. Ask each company in the sector which approach it uses and why.

Connect each rule to the way the company earns money. A cap on fees reduces revenue. A capital requirement increases the cash needed to start. A data rule increases the cost of storing and protecting customer information. A licence delay slows the launch date.

Estimate the cost and time of compliance, not just whether it is allowed. A rule that costs ₹50 lakh and 18 months to meet can be a wall for a small startup and a moat for a funded one. Our guides on RBI rules for fintech, SEBI and the data protection law show how this plays out in specific areas.

Set up a simple routine. Follow the websites of the regulators that matter to your sector, and subscribe to their circular and notification feeds where possible. Read the summary of each new notice and ask one question: does this change who can operate, what they can charge, or what they must report?

Join an industry body or founder community for your sector. Associations often respond to draft rules with joint comments, and members hear about changes early. Founders in the same sector also share practical lessons about how an authority actually handles applications, which written rules do not show.

Last, keep a written record of every approval, licence number, renewal date and compliance filing. Missing a renewal date is an easy and costly mistake. For anything high stakes, hire a professional who works in that area every day.

Regulators send signals through discussion papers, speeches, enforcement actions and penalties on other companies. Reading these tells you whether rules are likely to loosen or tighten. A string of penalties in one area often precedes tougher rules.

Also watch how rules differ abroad, since Indian regulators sometimes borrow ideas. Keep a short watch list with the item, the expected date and what would change. Update it every few months. This guide is general information, not legal advice, so check the current position with a qualified lawyer or company secretary before acting on any rule.