In this contribution, we would like to make a few points how agent-based models, a fairly new protagonist in the area of model-based legal policy advice, can enrich the possibilities for the lawmaking profession to capture phenomena that seem to evade current mainstream lawmaking processes. Our additional aim is to spot issues that need to be addressed in order to make the approach acceptable to the mainstream law profession. The application area of our contribution is data protection law and the force of data protection regulation. Within our model, agents are usually regarded as bounded rational and apply reasonable strategies towards law.