So if it isn't perfect, it isn't worth doing it at all? Is it better not to have GDPR and just let them not even get fined? I agree that fines are basically the only effect it had - but that does not mean it isn't a step into the right direction.

I agree that it could be more effective and I would welcome more effective policy in regard to data collection/processing and its transparency.