Technically yes, but practically, if someone can't get their job done without breaking rules, they're going to break the rules. If your goal is actual compliance with rules, giving people a way to comply is much more effective.

Tell that the software companies. You can't demand to change the maw just because software companies want to illegaly collect data from their users. Why are people always complaining about data protection officers but not the shitty software companies. They have the tracking and the bugs which endanger their users and most of the time they won't even get punished.

100% agree. Data privacy _is_ doable. Yes, it's added complexity, but software companies make it out to be much worse than what it actually is — and people believe them. These large software companies just don't want the inherent risk associated with saying "I comply with data privacy law XYZ" – because if they actually don't because they missed something, they will be sued for a lot of money. It's just about money, nothing new.