Yes, lot's of resorts do this. In my opinion and from what I've observed, it's amazing that many more "resort divers" aren't seriously injured or killed.
And there aren't any laws regulating this in this country that I'm aware of either. 99% of what most divers regard as "laws" are simply industry standards. Self-imposed to try to make the sport safer. Scuba diving is, for the most part, a completely unregulated activity.
Need a cert card to rent gear? Industry, not law. Need a cert card to get tri-mix? Same. Dive boat won't let you dive without seeing your cert card? Once again.
Although D.O.T. requires 5-year inspections of cylinders, annual V.I.P.s are not legally mandated, nor are any certifications, recreational or professional. Granted, the threat of law suits will help curb much activity. But there's no law that says you can't print up a couple of fancy wall documents and call yourself "Supreme Instructor Trainer of My Very Own Agency." There's no government oversight agency that allows, or prevents, an agency from operating.
Why bring this up? Because in the end it is the individual's responsibility to ensure that what they do is safe. In many countries this goes as far as no real threat of law suits either.
P.S. - I prefer it stay unregulated.