We do not regulate how a coffee shop does accounts in the same way we regulate a bank.

Many regulations only apply to companies bigger than 50 employees, more than billion of turnover, data on over 1 million people, etc. Or in a spesific market.