Regulators rarely enforce law that protects homeowners from lead poisoning