A real case showing how regulation—not more protocols—changed everything.