If I understand it correctly, the recent CJEU ruling on GDPR [0] should improve the Irish DPC limitations by allowing enforcement in other member states where violations have occurred (under certain specific conditions).
[0] - https://www.reuters.com/world/europe/top-eu-court-says-natio...
Then there's the Irish who "oversee" Facebook and Google and do SFA.
So the GDPR is not enforced [to a level anywhere near what the legislation is supposed to do].