Risk-based health and safety regulation