That's only true in digital systems. In bureaucracies it's easy to do, you just have someone approve exceptions based on unspecified rules and label non-complia

That's only true in digital systems. In bureaucracies it's easy to do, you just have someone approve exceptions based on unspecified rules and label non-compliant accounts as compliant or ignore their non-compliance. There's a recurrent meme in the tech world to try to treat the law and governments like rigid rule bound computers but they're not, it's a system composed of people and people bend rules every day.