[unbalancedevh]

This kind of failure-to-enforce is endemic to government. Oversight and enforcement are implicitly expected of well-regulated governments, and that costs money that nobody wants to pay. Laws get enacted with little thought to how much it will cost to administer them, and they either get underfunded or added to the list of government bloat.

There is no easy way out. The oversight to ensure that governments do what they're expected to without corruption costs real money. We haven't yet figured out how to balance good government with fiscal efficiency; but it would at least be an improvement if people could be educated on the actual cost of properly implementing a law before it gets voted on.

As usual for cases like this, the only chance for a person to force compliance is to have enough money/resources, putting it out of reach for the general population.

[spwa4]

This is one problem, but in the GPDR's case it's worse: the law is designed for governments. The only people who can actually take action based on the GPDR ... are NOT the courts (same with the AI act btw).

Which governments have immediately used to:

1) exempt themselves from GPDR (e.g. allowing the use of medical data in divorce cases, and then refusing deletion of medical data from public institutions "for that reason". Then of course this was extended to tax enforcement (some of you European bastards DARE to try to get dental treatment when owing back taxes! Some things CANNOT be allowed)

2) they used it to attack certain firms for entirely reasonable reasons. One example, one of the very first cases, before the law was even in force was against Google. You see there are some online articles about José Manuel Barroso, the communist non-executive chairman and senior adviser of London-based Goldman Sachs International (yes, really, communist, not a joke), ex-socialist, then EU commission president ... that according to him violate the "right to be forgotten" (which technically doesn't apply to public figures, but apparently EU commission presidents aren't public figures)

There were some articles he wanted deleted about how technically he is (was?) a murder suspect (he organized and participated demonstrations where some people were killed by a mob that he was part of, and probably the leader of), and how there were complaints against him by his students that allege he beat them up (as in physically), apparently in arguments about financial systems (yes, even when he was a pretty extreme communist he was a professor). He couldn't get the articles deleted ... and so he wanted them hidden. He got what he wanted, without court involvement.

[tpxl]

We have figured out how to get money to enforce paying taxes and GDPR compliance: Pay them with the taxes and fines. USA's IRS has a famously high ROI, and I'm willing to bet a single GDPR fine for Google/Facebook/Microsoft pays for a whole lot of GDPR enforcement.

[ryandrake]

In general, when it comes to enforcing laws on normal, individual people, governments seem to have no problem finding and cracking down on you. When it comes to enforcing laws on the rich, or corporations, suddenly the kid gloves go on and the "but we're simply not funded for enforcement!" excuses emerge...

[lo_zamoyski]

While enforcement and the cost of enforcement is an important consideration, I would say that there is still value in unenforced law and regs. They set an expectation and a norm.

[xboxnolifes]

Sometimes. Other times they create an environment where the only rational action is for everyone to constantly break the law, allowing for selective enforcement.