Regularly enforced against who?
Let's say some company or "entrepreneur" sitting in an office in Palo Alto or in his house in the Philippines wants to sell a SaaS app they vibe coded in a week.
They use AI to create a marketing email and list of targets. They blast it out and it lands in the inbox of some dude in Germany.
Do you really think the company or individual is going to ever face any consequences for sending the guy an email?
If they ever want to have a presence in Germany, yes