DPAs are currently understaffed, and the complaints and lawsuits are dragging, but I believe this is only temporary. The legal framework is there, lawsuits are

DPAs are currently understaffed, and the complaints and lawsuits are dragging, but I believe this is only temporary. The legal framework is there, lawsuits are happening, and it scares companies built on data surveillance, and we know because some of them have moved out of EU already. The big players are operating in a gray area that's harder to attack, but then again, they are bigger targets. Given past fines, and given GDPR's potential, I'm sure the EU wouldn't mind replenishing their budget in the future.