>As to the practicality of suing for violations, how would you quantify "damaged suffered" from saving a cookie in my browser? The GDPR does not regulate cooki

>As to the practicality of suing for violations, how would you quantify "damaged suffered" from saving a cookie in my browser? The GDPR does not regulate cookies at all, at least unless they are a form of processing of personal data, so you wouldn't be able to sue for that. It's the ePrivacy Directive that deals with cookies (and storing/accessing other data on your devices), and that lacks any sort of private cause of action, at least at the EU level. Directives (unlike Regulations) have to be transposed in to domestic law in EU member states, so depending on where you are there might be a private enforcement mechanism, but I doubt it.