Merging rulebooks could streamline compliance but dilute segment safeguards; tighter outsourcing norms may push up costs