validation-regex syntax for a replace

System

I need to do a validation-regex for an inline database call I'll using - so that each time I see a & it gets replaced with a & - what should the sytanx be - I tried something like:
validation-regex =".* [&], [&amp]"

with little success