The regulator said the forum had not done enough to protect UK users - but critics accuse Ofcom of acting too slowly.