I suspect that the lawyers of major players (FANG etc), have done their GDPR homework, and they have a handle on what they can get away with. On the other hand

I suspect that the lawyers of major players (FANG etc), have done their GDPR homework, and they have a handle on what they can get away with. On the other hand, the web sites a lot of news agencies and smaller players seem to be run by cowboys, and eventually some of them are probably going to pay the price.