The regulator’s investigatory and enforcement powers are potentially extensive and intrusive. The provision of these powers may be necessary, but they must be used in a proportionate manner.