> the laws are in place now, but appear to be toothless Currently the country's regulators (such as ICO in the UK) are swamped with GDPR complaints and are pri

> the laws are in place now, but appear to be toothless Currently the country's regulators (such as ICO in the UK) are swamped with GDPR complaints and are prioritising the most egregious cases. I imagine cookies are a way down the list. In terms of reporting, you tell the company itself first, if you don't get satisfaction you report to your own European country's regulator, or that where the company is based.