The GDPR is mostly the same EU data protection law, but one new part is that civic organisations/NGOs/consumer organisations are allowed to sue the companies to

The GDPR is mostly the same EU data protection law, but one new part is that civic organisations/NGOs/consumer organisations are allowed to sue the companies to enforce privacy law. So the ICO might do nothing. But Max Schrem's new org NOYB might.