How to manage third-party regulators