Indeed. A country which fails to follow its own law on privacy would likely be considered a country which does not have appropriate law on privacy.