Sure, if the regulator doesn't move to enforce then the law won't have any effect but at least to me that sounds like a problem with the government as opposed to a justification for draconian penalties.

Targeting management seems like a tactic that should only be employed where great urgency exists such as life threatening danger. I don't think marketing material is anywhere close to qualifying.

I hate my inbox being inundated with spam as much as the next guy but that doesn't mean drawing and quartering the perpetrators is justified.