Enforced by companies who are doing shady things with data in the most inconvenient way, rather than listening to DoNotTrack or https://globalprivacycontrol.org/

Because if they can say "hey look over there, regulation bad"; they can escape regulation if it is repealed