Why consumer protection regulation is necessary — but often useless