Pension regulator must tackle rule-breaking employers