Laws have to be pragmatic.

It's like making encryption illegal. Anyone with the know-how can do it, and you can't detect an air-gapped model being trained.

We, as a society, shed data more than we shed skin cells. Restricting dataset access wouldn't really be that much of a deterrent either.