Well, presumably you can report them to the relevant regulator, then. That's the point of the law.