Plenty of rules and laws exist in which enforcement is difficult, and nonetheless exist. I think it’s enough to make some legal departments say no, and there are also companies stupid enough to brag about it regardless if it breaks the law.