It's been about a yea since the sweeping regulation has passed, and now officials from Ireland and the UK have said they are investigating major GDPR cases and plan to announce enforcement actions in the next few months.
Helen Dixon, Ireland’s data-protection commissioner, said at an event here that her office has received about 6,000 complaints since GDPR went into effect. Most have been minor, such as individuals having problems deleting their accounts with certain firms. But her office is now investigating 18 cases involving large data breaches, systemic privacy issues and other serious violations at technology firms, she said. Ms. Dixon said she plans to bring her first draft decisions for enforcement actions to the European Data Protection Board this summer. Other data protection authorities can raise objections.
https://www.wsj.com/articles/large-gdpr-fines-are-imminent-eu-privacy-regulators-say-11556829079