They do, when they are enforceable and the punishment for violations is credible. But in the tech world, punishment for things such as privacy violations and market abuse most often amounts to a trivial fine, and business then continues as usual.