This question was asked a lot when GDPR came around, and it's essentially an implication that the regulator will act in bad faith.
Courts and regulators, particularily European ones, understand when there's a "will" to follow the law. It's one of the differences between "rules-based" and "principles-based" regulations.
Courts and regulators, particularily European ones, understand when there's a "will" to follow the law. It's one of the differences between "rules-based" and "principles-based" regulations.
https://news.ycombinator.com/item?id=17100541