It's largely unregulated. Institutions formally registered as colleges and universities have more stringent disclosure requirements.