Sure, you can get by without one, just like you can speed without getting a ticket. But that doesn't mean it's the type of situation that normally occurs. For example, if nobody in your company knows how GDPR works, how would you know that you're complying with it? The same goes for tax laws.