while still complying with the letter of the law

Is that enough though?
I’m not sure about the EU level but in several states not only the letter of the law but also the intent of the law matters.

Edit: To clarify, I wonder whether it is enough for companies to follow the letter of the law while flagrantly ignoring the intent of the law.