Beyond the giants the only thing the GDPR practically did was double the amount of cookie popups you see on the web, and the suppoused harsh consequences don't work if so many organizations are doing it that the bureaucracy can't keep up