normative – empirical legal research

Normative-empirical legal research is a methodology that combines two complementary perspectives to understand how law functions in society. It bridges the gap between 'law in books' and 'law in action.' The 'normative' component analyzes legal texts, regulations, and judicial precedents to establish the standard of what 'should be.' The 'empirical' component uses social science methods like surveys, interviews, and data analysis to examine what 'actually is' happening in practice. In enterprise risk management, this approach directly supports the principles of ISO 31022:2020 (Guidelines for the management of legal risk) by helping organizations not only understand their legal obligations but also assess the real-world effectiveness of their compliance controls. It provides more actionable insights than purely doctrinal research, which is theoretical, or purely empirical studies, which may overlook the legal framework.

In ERM, this methodology is applied systematically in three steps. Step 1: Normative Analysis, involves identifying all applicable laws (e.g., GDPR, Taiwan's Personal Data Protection Act) and translating them into a concrete checklist of control objectives, establishing a compliance baseline. Step 2: Empirical Investigation, involves collecting real-world data through methods like employee interviews, transaction sampling, or customer surveys to assess actual operational practices. Step 3: Gap Analysis and Risk Mitigation, compares the empirical findings against the normative baseline to quantify compliance gaps. For instance, a bank might find that 15% of high-risk accounts lack required enhanced due diligence despite policy requirements. Based on this, it can implement targeted solutions like automation or training, aiming to reduce the gap to under 2%. This provides measurable outcomes, such as improved audit pass rates and a quantifiable reduction in potential regulatory fines.

Taiwan enterprises face three key challenges. First, a dynamic regulatory environment, especially in tech and finance, makes maintaining an up-to-date normative analysis difficult. The solution is to leverage Regulatory Technology (RegTech) for automated monitoring and establish a dedicated compliance team. Second, a lack of resources and expertise for robust empirical research. A practical approach is to start with pilot projects using existing data (e.g., internal audit findings) and collaborate with external consultants. Third, cross-departmental silos hinder data collection and collaboration. This can be overcome by establishing a C-level sponsored, cross-functional risk committee to foster a culture of shared ownership for compliance. A priority action is to secure executive buy-in and launch a focused pilot project within one quarter.

Winners Consulting specializes in normative – empirical legal research for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact