Policy and regulation
Policies give strategic direction and an objective. They can be produced by any organisation. Compliance is not necessarily mandatory or externally monitored.
Regulations are obligations on organisations that they must comply with. Compliance is mandatory and monitored.