I totally get your point. These restrictions and laws should be sufficient in theory but we have already seen its not always working the way it is supposed to.

Unfortunately thats correct. It seems its really easy to bypass the laws without any fear and leak the personal data.