'You have that backwards, or replied to the wrong story.'
The Act exists, but it still must be enforced, that's my point... How do you typically ensure its enforced? You must lawyer up! If you've no money as most Americans don't, that means a class action suit, which often only benefits the lawyers. That's what's wrong here.
Recently, Equifax tried to get consumers to waive their rights to sue if they took advantage of the free 1-year credit monitoring. My guess is they would have gotten away with this too, only that the breach was too big, and some executives opted for insider trading!