Threaten him about taking legal action or calling the police just to scare him.
The police can do nothing about it as they have not broke the law. Even if the Op owns the photos the police will not be interested. If the agency took the photos then they also own copyright so she could not use that for copyright infringement either.
If she owns the photos she would be better off getting a solicitor to send a letter stating they have so many days to remove the said photos and profile but if the agency own the photos they can happily ignore that.
The best thing to do would be to keep asking in a polite manner for them to remove her profile and can tell them a made up story. i.e she is going to study law so cannot have this type of advertising or something similar like nursing etc