The basic idea I have is that when you bring to market a new technological product, you need to register it with your government/jurisdiction and depending on a few params (maybe company size, revenue, funding, industry/vertical etc.) provide more information.

Similar to tax and accounting regulations, as you grow these regulations grow, too. For example you might need to provide risks and threats analyses for your technology.

You're liable to provide this information to the best of your ability given context (e.g., they wouldn't require a 30 page risk analysis from a indie hacker who has 20 users). If it turns out that you provided false information delibrately, or acted in bad faith, there are consequences like fines, bans, and so on.

Of course, based on your technology the government can prohbit you from bringing it to market, add constraints or require more info.