According to John Naughton in The Observer, the GDPR is

a powerful but essentially unenforced regulation, which makes a mockery of the rule of law.

The Irish Data Protection Agency is one of the busiest but it’s being starved of resources.