The EU Commission's very own website deserves an honourable mention at least. Last time I looked (just a few days ago) it was the epitome of "What you're not a

The EU Commission's very own website deserves an honourable mention at least. Last time I looked (just a few days ago) it was the epitome of "What you're not allowed to do anymore according to GDPR.": Tracking and other cookies with no way to opt out, no privacy policy etc. Then again, GDPR of course doesn't apply to them. The very least they could do in my opinion, however is to lead by example.