And here we are at the core problem: Implementing laws without being able enforce them is not only ridiculous but harmful for the credibility of any governmental institution. This is the core problem of all EU tech regulations.
Instead of developing operational excellence in their prosecution authorities to be able to track down and punish bad actors, they install regulations for everyone and try to simulate competence harming their own economy.