There's a lot of this, and it's a real problem.
We need to make small claims court far more accessible. But outside of the GDPR, there's also just weirdness in terms of what is covered where. I can appreciate that having laws at the county level, the municipal level can be onerous to comply with, so you want things at the national level -- if not international.
But as soon as you do that, some asshat works to reduce regulation because "regulation bad" without any qualifiers. And then as you say, lack of enforcement, is that alternative to this.
Give them their laws, make them feel as if things have been done, but then don't enforce. You're in the same boat, but people "feel" better.
This is a bit of a tangent, but where I live you have to cook a hamburger to safe temperatures. It is illegal to do otherwise, unless it is freshly ground in house, and we have actual, real inspectors that will ensure safe handling practices.
(This isn't me railing about eating raw meat, I eat my steak med-rare. But that's a steak, if you're going to cook a hamburger that way, you need to wash the outside, grind it up, and cook+eat it within hours. Many restaurants are buying mass produced burger paddies and not even cooking them, which is pure insane.)
Yet when I was in California, it's OK to just present a charred outside, a raw inside, along with loads of parasites. The restaurant is covered if they put up a sign saying something about 'raw meat can make you sick' or whatever.
So every restaurant puts up the sign, then just doesn't care about cooking it to safe temps. Yee-haw, FREEDOM!
Point is, people themselves, everywhere ... whether it's a small business or just their customers, don't even know, understand, or really care.
And this is the true problem. People can't even understand the risks of raw meat, something I was taught in public school when, oh I don't know, freakin' 10 years old!
While it doesn't seem that difficult to people on this forum likely, it surely is for the average person. Clearly.