I would have catalogued my attempts to resolve the issue, and then filed all of it in an official complaint with the regulators after 40 days. By giving them extra time to comply with the regulations, it simply validates their strategy of wasting people's time and hoping they give up doesn't result in negative consequence for them, but instead that is the optimal strategy for them.
That's unfortunate, hopefully when the are caught, the punitive damages are sufficient to force a change in their cost benefit calculations towards doing what's right. I wouldn't hold my breath though.
