Most of the regulation so far consists of insisting on KYCs and so on - so to prevent money laundering, which is the govt's priority.
I'd like to see regulations insisting that the exchanges get insurance against hacking, and regulations beefing up the exchanges data-protection, to protect users.