Wondering who will be bearing the repercussions of not keeping to regulatory policies in It.

Usually, the customer bears the ultimate repercussions, whether it be a patient, an investor, or a student, etc. It just depends on the country, the regulation, or standard and what it is meant to protect or regulate.