A significant portion - if not the vast majority - of laws and regulations have no criminal penalties and have civil penalties at most. Many are just advisory.

A significant portion - if not the vast majority - of laws and regulations have no criminal penalties and have civil penalties at most. Many are just advisory. Notice how Apple has technically been in violation of these rules for years and is only now getting punished and nobody is going to jail. Everyone shouts about GDPR but fines are something like the 3rd or 4th stage of the remedy process - up until that point the regulator is working with you and no punishment of any kind has occurred. Of course since the GDPR is at an EU level, individual member states could opt to jail people for violations - I couldn't find any examples of that, however.