But is it even enforced? Take software licenses. Most software out there uses open-source licensed dependencies. Even the permissive licenses require attribution.

But most software does not honor those licenses, and nobody cares. Enforcing such a law takes money.

I guess at least the GDPR can be enforced, to some extent, with Big Data. It seems like the fines are usually ridiculously low (they don't seem like an intensive for the company to change anything), but that's better than nothing.

It's not very well enforced but the fines are large, and big companies like Zoom will have suitably paranoid legal departments ensuring that it is followed.