Risk, regulation and red tape