Everywhere has poor implementation. The UKs ICO gave companies an entire year of grace as they weren't ready for it themselves and have done very little in the way of fines since. They are as always underfunded and simply don't have the resources to enforce it but so far it is a law with no teeth due to no enforcement the EU over. Companies have managed to get away with the wrong defaults and dark patterns for acceptance for years at this point, setting a clear precadent for how this will work going forward.