I think his main point is that for now GDPR is just as inefficient as the cookie "law" it replaced, which I have to agree with - the only thing that will make t

I think his main point is that for now GDPR is just as inefficient as the cookie "law" it replaced, which I have to agree with - the only thing that will make these regulations useful is enforcement - until that happens companies will just ignore it (as we can already see with plenty of non-GDPR-compliant sites).