I would argue that we don't need new regulations, we need to enforce existing laws against fraud. It is fraudulent to sell something and then later disable ones access to the thing you sold them access to.