Exploring regulatory approaches to consumer vulnerability