Or dont do any of that, take the screenshots as the OP has then contact BA and tell them you are reporting a bug and feel 30 days is a long enough time for a company their size after which time you'll be sending the evidence to the DCO who will probably take a very dim view based on their recent track record.

Clearly the only way they are going to learn at this point is with the bad publicity and the fines mounting up. Really no excuse for it in this day and age & just reconfirms to me that BA's approach of playing the poor innocent victim in the breaches of last year wasn't exactly a deserved position.