Frankly because if we had real consequences, Mark Zuckerberg would have been in jail for "accidentally" letting Cambridge Analytica scrape their data "unknowingly". Or he would have faced consequences at Harvard for scraping user data. He's obviously not the only one, but absolutely one of the higher profile cases.