The problem is law doesn't fine for doing bad things, it fines for breaking the law which is not exactly the same. In my previous company for a project we had to hire lawyer for more than a week just to determine if we were breaking law, even though the site didn't do any bad things by normal people standard.