Business Rules as data

Do you sometimes use database data to regulate business rules in order to be able to change them at run-time?

There is some debate about this, although from my experience it has been focused on writing tests with data to describe business rules. Todd prefers to write business rules as scripts/steps so that dependencies will show up in the DDR and can be traced. I can see pros and cons to each approach.