It's not just enforcement, it's also the standard of proof. If you have well-funded UX folks and massive A/B testing you can build a bad faith UI that funnels users without it looking like one to any easy standard of law. No amount of DPA guidance can beat that gaslighting.
♥ 1