It's "0.2% effective" by measuring in an arbitrary and frankly unrelated way. That figure comes from "what number do we get if we take the amount of illegal fun

It's "0.2% effective" by measuring in an arbitrary and frankly unrelated way. That figure comes from "what number do we get if we take the amount of illegal funds caught, and divide by the amount of money spent by other companies complying with the regulations?" I'm sure you'll agree that this doesn't actually relate in any way to the specific number discussed above, aside from sharing the adjective "effective" used as a descriptor. The cost of compliance to legitimate parties does not have any obvious mechanism to directly affect the deterrence effect.