Backtrack, your CAA FOI may well have said "it's a sore point" etc. but the reality is that both the IAA and CAA have the obligation to act if they think there is something to act upon. Also, as I understand it, both say they will act if they get reports, but also claim that they don't get such reports.
For all the talk of individuals within both of these organisations, BOTH have proved remarkably careful in tackling the said operator. Indeed, do they not both agree that the said operator "meets all their requirements"? For that indeed is exactly what the operator claims.