The study is based on interviews with 410 chief executives of small organizations and their officially recorded compliance with regulatory standards. We find partial support for the certainty of detection as a predictor of both self-reported and officially recorded compliance but no support for the certainty or severity of sanctioning. The narrow range of sanctions available in the particular regulatory domain studied (regulation of nursing home quality) has enabled a fuller specification than was possible in previous studies of an expected utility model for all available sanctions. Managers' expected corporate disutility from all sanctions fails to explain compliance. Deterrence does not work significantly more effectively for chief executives (a) of for profit versus nonprofit organizations, (b) who are owners compared with those who are not owners, (c) who say they think about sanctions more (sanction salience), (d) who may better fit the rational choice model in that they are low on emotionality, and (e) who have a weaker belief in the law. Nor is deterrence more effective when compliance costs are low. 23 notes, 5 tables, 2 figures, and 75 references (Publisher's abstract)