We do have privacy laws today (USA user), but they are so weak that near my office I regularly see ads advising businesses to treat it as a liability problem and instead buy insurance as a faster and cheaper alternative to good practices.

And it works! This approach should not be feasible to address the costs of violating user privacy. It reiterates to me that we are far too lax.