Well, the difference is that theft is a natural law. We are born with an instinct it is wrong.

Having a data processing officer in the EU for some definition of significant business is not a natural law and requires careful parsing of the legal text.