If benefits of non compliance > consequences, don’t comply, else, comply.

That simple, and applies to tech companies as well.

At the end of the day who’s policing this stuff anyway? People only find out when there’s a leak.