Not only is it not enforced (why are Google and Facebook still around considering their entire business is to basically violate the GDPR?), but there are plenty of exemptions that can be abused to argue that nasty behavior falls under "legitimate interest".
Making a complaint is also super difficult. The ICO (UK's privacy regulator) for example insists that you have to first contact the offending company and give them 3 months to reply which is an insane amount of effort and not always possible (what if there's no way to contact the company, or you have to login/create an account first). There should be just a simple form where you send the URL of the offending page and they take it from there.
Not only is it not enforced (why are Google and Facebook still around considering their entire business is to basically violate the GDPR?), but there are plenty of exemptions that can be abused to argue that nasty behavior falls under "legitimate interest".
Making a complaint is also super difficult. The ICO (UK's privacy regulator) for example insists that you have to first contact the offending company and give them 3 months to reply which is an insane amount of effort and not always possible (what if there's no way to contact the company, or you have to login/create an account first). There should be just a simple form where you send the URL of the offending page and they take it from there.