Years ago I made a report to HSA, with video evidence on an ex colleague blatantly vaping on the streets and stashing his loots within company premises, they subsequently wrote an email to the company to give a warning, instead of going down for an inspection or raid.
The email did not stop that joker from vaping, instead he started hiding in obscure places to vape, such as roof tops and company toilets, making enforcement efforts harder.
They need to be more proactive in stopping these users and suppliers, instead of just sending emails.