Speaking from personal experience running a non-profit seeking to disrupt the entrenched prison communications industry, there have been several. FCC data reporting requirements that took an FTE 200 hours to complete, accessibility requirements that have to be in place before you can (legally) even launch a pilot or MVP, endless legalese documents to parse through, compliance requirements that have to be checked even if they don't make any sense for the application, and some of the best ones: arbitrary requirements like "to be eligible for a proposal/contract, you must be in business at least 10 years and have a minimum $50M in annual revenue" (a requirement clearly written by our incumbent competitors to exclude us that was adopted by the regulators). Oh and all of that stuff you have to deal with before you can even close your first deal.