Time to act on auto-enrolment, says regulator