Values-based regulation must be placed ahead of legal compliance when companies integrate CSR into core business strategy.