And this is why data protection laws, like the (imperfect) EU ones that are so lamented here on HN, are necessary.

That's because they're seemingly perfunctory. What's worse than no law is a bad one that doesn't do anything but make you feel like something is actually being done.