If we agree that data will be collected whatever laws we put in place, under the same premises can’t we agree that it will be misused as well ? Problem with la

If we agree that data will be collected whatever laws we put in place, under the same premises can’t we agree that it will be misused as well ? Problem with laws to me is that they are only binding to some portion of the actors. Some government actors have a mandate to work around the law, and other organisations have divisions dedicated to avoid triggering these laws. Regulation is only part of the solution.