GDPR enforcement starts slow because the idea is not to amass fines but to protect privacy. Adversarial actors can exploit that, of course, but ordinarily lack

GDPR enforcement starts slow because the idea is not to amass fines but to protect privacy. Adversarial actors can exploit that, of course, but ordinarily lack of cooperation can rack up the fines pretty quickly. The main issue is that the Irish DPA is responsible for Meta (and the other US big tech companies who have their EU HQ there) and he's (nearly criminally) negligent to the chagrin of the other European DPAs. I suppose the Irish government is scared that the companies engage in forum shopping if they're strict on enforcing European rules (and some other country offers even just slightly more agreeable terms to the companies) and then bye, bye, tax moneys.