I wonder how many companies are waiting to see how this will be enforced before making the change. If GDPR is really actively enforced and causes some real pai

I wonder how many companies are waiting to see how this will be enforced before making the change. If GDPR is really actively enforced and causes some real pain to companies, then I expect your prediction will be accurate. If it isn't, I expect a lot of sites will do something less than what GDPR says.