A lot of things that are illegal in the EU still fly until the offending company is taken to court and order to pay damages and mend things.
Having laws is one thing, enforcing them is another.
Just look at the huge number of websites that are not GDPR compliant.