A regulator doesn't have to explicitly say "don't do something" in order to tell entities it regulates to not do that ...