There's already some high level people lobbying to update interpretation of GDPR in a way that it would require proof of actual harm to user for any fines to be issued - essentially completely neutering the regulation.