Let's not forget that GDPR has been introduced to enforce a law that already existed but worked on voluntary self-regulation basis and as such was fully ignored

Let's not forget that GDPR has been introduced to enforce a law that already existed but worked on voluntary self-regulation basis and as such was fully ignored but pretty much every actor. GDPR is also quite weak in this regard as it has few new additions: explicit consent (thanks to snowden exposing prism and despite the largest lobbying campaign against it orchestrated by silicon valley[1]), max possible fine increased so actor like google and facebook would stop paying 150,000€ fines right and left while laughing in the face of European laws, and class actions. Again it's only thanks to snowden revelations that the GDPR weakening personal data protection was overturned. The real change that matters is that now the law can and will apply. [1]: https://lobbyplag.eu/influence https://lobbyplag.eu/influence