Regulated in what way? Something like Europe's data protection laws, with limits on information sharing without permission and duration of data retention? Or

Regulated in what way? Something like Europe's data protection laws, with limits on information sharing without permission and duration of data retention? Or something else?