Disagreed. This link often gets posted as a counterpoint but look at the biggest issue with privacy currently: tracking consent forms. The regulation mandates that any non-essential tracking (as in not required to provide functionality or fulfil legal obligations) should be opt-in and it should be as easy to decline as it is to accept (aka you should provide both an accept and a decline button - hiding the decline option or making it difficult doesn't count). The majority of companies out there fail at that requirement, and it's been almost 4 years since the regulation went into effect and nothing has been done even though those cases should be very straightforward as the evidence is right there on their websites.

Schrems' company Noyb is scanning websites and trying to force companies to do something about it (or potentially face the law).

https://noyb.eu/en/noyb-aims-end-cookie-banner-terror-and-is...