You can't just pay lip service to data protection

from here and here

Clearview AI, the biometric surveillance company everyone loves to hate because they add you to their system without your consent, is apparently ignoring French regulators trying to call it to heel over violations of the European Union's GDPR. While they haven't paid the fines yet, they're now going to be growing by the day, and the EU has already thrown out existing data transfer arrangements with the US over GDPR violations (like the Cambridge Analytica scandal) in the past. 

Privacy? Check!

from here (image source)

It's compliant with the privacy policy, therefore privacy has been protected, right? RIGHT?!?! 

If only things actually worked like that.

Seems Compliant

from here (image source)

So long as you've got the approved access controls in place, you're all good. Who cares if the controls are effective, that's not what compliance measures. It doesn't matter that anyone who can navigate stairs can also navigate around this obstacle.