This paper presents principles for creating flexibility and agility when implementing new or revised policies into business processes. These principles include: 1) defining and using business services, 2) integrating and orchestrating business services through the use of events, 3) separating process, knowledge and resources and 4) implementing policy in an integrated manner. Business services are components encapsulating business functions and having clear responsibilities and accountabilities. The case study shows that these forms of flexibility and agility can help to implement policies more quickly and cost effectively. An organization's resources and level of flexibility and agility determines what laws can be implemented within a certain time. The improvement of flexibility and agility requires innovations on all levels: infrastructure, business process and organization. The level of flexibility and agility should always be measured by a combination of measures. We make plea for instruments assessing the impact of policies on organizations prior to implementation.