Companies face an expanding kaleidoscope of regulatory requirements, both from home and abroad. Against this backdrop, how can GCs ensure that their businesses are adequately equipped to handle regulatory investigations? Are there approaches which could make investigations easier to handle, such as good data management or compliance communications, that could be factored into day-to-day business practice? What do the regulators themselves regard as good and bad practice in their engagement with those they are investigating? Most importantly, what can GCs do to encourage a culture that supports compliance and avoids the need for the regulator to call?