There is enforcement going on, but they don't have enough resources to go after every single violation. They are focusing on the biggest violators and the most

There is enforcement going on, but they don't have enough resources to go after every single violation. They are focusing on the biggest violators and the most flagrant violators. Right now, most companies can get away with giving lip service to following the law, but not really following it, e.g. having a cookie banner but one that doesn't really comply with the law. You probably can't get away with openly refusing to follow the law.