GDPR gives people a fair amount of protection and it is enforced.
Not in my experience. I have filed complaints of ~20+ GDPR violations under article 77 going years back. Not a single one of them enforced to date. These cases just sit idle for years. The problem is the GDPR gives no recourse when DPAs fail to honor article 77 obligations. It’s toothless.
That shows a low count of cherry-picked enforcement actions. If you had a way to get a count of unenforced reports it would likely be an embarrassing comparison.
Apparently I’m wrong about this… the preview is said to be created by the server:
https://links.hackliberty.org/comment/1068761
EDIT: well, apparently it’s questionable. No one knows with confidence.