Regulators and campaigners say more needs to be done.