Maybe this is a little bit oversimplified but:
Regulations exist to protect everyone's Safety.
Policies exist to differentiate Airlines and attract the customer's cash.
Regulations are changed by the appropriate safety bodes.
Policies are changed by the customer electing to use the Airline.