What I mean by regulation:

- There is a limit on how many sites the login information can be shared with without notifying the user.

- If the login information is attempted to be shared with a website that is a known tracker, the process is stopped, and the user is explicitly prompted to allow this.