Deepfake regulation: A double-edged sword?

What legal protection currently exists around deepfake technologies, and where are businesses at risk?