Enforcement is only still starting up. Officially as of May this year, with the possibility of handing out fines for violations up to two years back from that date.

https://iapp.org/news/a/heres-why-the-first-gdpr-fines-could...