I think you can follow all the laws and still get hacked, so I don't think the fact that they got hacked tells us much about whether they were following the rules