Not to go prescriptivist, but yes I think your "line" for regulated is just semantically incorrect, a non-compliant organization can still be regulated.
One could argue that unenforced regulation (and a thereby non-compliant organization) is not that different from nonexistent regulation.
One could argue that unenforced regulation (and a thereby non-compliant organization) is not that different from nonexistent regulation.