The shift offers companies immunity from certain regulations — and, critics say, weakens protections for scam victims.