patient regulations