GDPR Enforcement Is Broken

Disappointed but not surprised.

There's also another problem and it's that even if the national regulator did a good job, a judge can simply undo it. It happened with La Liga mobile app which was recording with the mic at all times to identify piracy. It was fined by AEPD (national regulator) but later a judge said that it was wrong to fine then because AEPD haven't published any guideline saying that it was wrong to do that and that asking for consent constantly would be annoying.

It reminds me of sanctions and how they’re enforced. You can put anything on a sanctioned list, but actually enforcing those sanctions is exponentially harder.