e.g. Mastercard and Visa could be required to report suspected violations to a regulatory body, to which the incriminated party could appeal.

That would help separate denial of service derived from regulation and denial of service derived from corporate policy. It's a big step in terms of transparency of the impact public policies have.