GDPR could have been great, if it was actually enforced in the way it was intended. Cookie banners and dark patterns are not actually allowed, but without enforcement, it's basically meaningless.
replyIMO the biggest issue is that the member states are individually required to set up agencies to police this. This makes perfect sense for local companies, but is meaningless against large entities that operate across the entire EU.
It is being enforced: https://www.enforcementtracker.com
replyYou can report issues to your local watchdog. That takes quite some time, given the large amount of companies that do not follow the law, but it is enforced
Large entities (companies right?) take that very serious. Its the other way around, small companies might not be aware of.
replyNonetheless, i have seen in a very small company that we changed the behaviour of a camera which then only turned on when the action expected it and not before.
And in a very big company you alway have to fullfill it as a product standard.