Sometimes even big ones are doing these things, not explicitly surveillance so. Also true, smaller companies are more likely to be sketchy.

And unfortunately, these large fines are rare, hard to enforce by employees. The really extreme US stuff is not used, that's true.