I guess that the promise is done under oath. Which means that if it turns out later that it was a lie, the company exposes itself to a more severe punishment th

I guess that the promise is done under oath. Which means that if it turns out later that it was a lie, the company exposes itself to a more severe punishment than if it had simply violated some privacy regulation. Governments don't have the ressources to check every little detail about everything. And it would be quite invasive if they did, so they usually assume good faith unless they have suspicions not to.