On first day of GDPR beeing enforcable, non profit organization (where main protagonist organized 25000 class action suit against facebook in 2014, but was rejected by court - now he has legislation to back him up) filled 4 complaints in 4 different countries (looks like a good idea to not overwhelm ICO in 1 country with 4 investigations, probably 5th ICO will join (Ireland).
After reading the complaints, it is directed into common way how GDPR is beeing handled by large companies, showel everything under legitimate interest, update privacy policy and force consent, which is clear violation.
Now this is going to be interesting, maximum posible penalty for all four (combined) is 7.6 Mrd euros.
