Besides this GDPR Website thing, usb-c is great, energy standards are great, etc.
IMO the biggest issue is that the member states are individually required to set up agencies to police this. This makes perfect sense for local companies, but is meaningless against large entities that operate across the entire EU.
Nonetheless, i have seen in a very small company that we changed the behaviour of a camera which then only turned on when the action expected it and not before.
And in a very big company you alway have to fullfill it as a product standard.
You can report issues to your local watchdog. That takes quite some time, given the large amount of companies that do not follow the law, but it is enforced
And at least now developers can have reasonable reason to ask do we actually need to store this or do we want to store it. Before that would have been stonewalled.
