I feel the need to step in here. Certification != regulation. Regulation means there is a body that can enforce the requirements with monetary or other damaging repercussions. What Oceangate faced were certifications and their decision to side-step them were met with no repercussions except their reputation with those who wouldn't ever want to step inside their sub anyways.
Point is - regulations would have prevented this, but there are none.