I imagine this kind of behavior is common everywhere, and the bodies responsible for enforcing things (examples: data protection, consumer protection) just go "hmmmm sorry we're understaffed", "we don't take action on everything" or just refuse to investigate internally because nobody would EVER blatantly break the law :^).