It's been over a year now and so many sites are not in compliance. I'm surprised the EU doesn't start collecting fines from companies like Yahoo and TechCrunch

It's been over a year now and so many sites are not in compliance. I'm surprised the EU doesn't start collecting fines from companies like Yahoo and TechCrunch (and all oath sites). Just two that come to mind that are blatantly violating the gdpr with absolutely no way to not consent to their tracking. Mass email spammers are another issue. Why isn't the EU collecting this money from these large orgs that are clearly in violation? It could do a lot to help the people here.