Unfortunately, due to lack of clarity (and lack of clarification), many DPAs (privacy regulators!) have explicitly declared the “pay with data or money” model OK.

Google may have been one of the very few cases where a meaningful fine was given. For almost everyone else, blatantly breaking the law paid off big time.