The law of unintended consequences - embedded business models in IT regulation