I believe that informatics staff are regulated under the law of informatics. Examples of the statutory "regulation" that I have in mind include: a) data protection of personal information; b) prevention of staff who might slander and/or libel patients; c) searches of staff under criminal record bureau data. Also, internet law is slowly developing and may cover this topic already..?