I see only a couple major options for businesses:

1) you design a system that falls outside of regulation,

2) you build within regulations, or

3) you manage the risk of not following regulations.

Realistically, most early stage companies will do a hybrid of 2&3 because it's nearly impossible to even know all the applicable rules, so most focus will go to the most consequential laws.