The vast and growing web of rules and regulations that govern modern organisations is increasingly difficult to comprehend and manage. One technique for understanding and managing rules among stakeholders is enterprise modelling of organisational rules. However, rule models are usually flat, lacking hierarchical structure that allows for effective abstraction and reduced complexity. The aim of this paper is to examine the different aspects of hierarchy among organisational rules. A model pattern is proposed, based on the main constructs rule description, norm hierarchy, scope, and citation. The model pattern is demonstrated by instantiating it in a concrete case, the European Union’s General Data Protection Regulation (GDPR), using Wikibase Cloud to structure the data and Kumu.io to visualise it.