Very often it’s those same companies that wrote the laws they are “following”, so they don’t come at it from a point of “what’s the best way to accomplish this law” but as in “what’s beneficial to me and only me, and how can this be written so I’m in compliance but few others are”.