Comment by EraYaN

I mean the one thing GDPR did was scare the ever living daylight out of quite a few engineering teams and executives. Which honestly was what they industry really needed, people just needed to consider the data collection a bit more.

And fines have been levied and are levied constantly. It's mostly a man power problem as to how many, but the fines pay for more man power in some places so it all works out. It's just slow, which is why people always complain that nothing ever happens.