Nearly two years in, there has been little enforcement of the General Data Protection Regulation, once seen as ushering in a new era.
Since the law was enacted, in May 2018, Google has been the only giant tech company to be penalized — a fine of 50 million euros. No major fines or penalties have been announced against Facebook, Amazon or Twitter.
The inaction is creating tension within European governments, as some leaders call for speedier enforcement and broader changes. Privacy groups and smaller tech companies complain that companies like Facebook and Google are avoiding tough oversight.
Europe’s challenges risk undermining efforts elsewhere in the world to create tougher privacy rules.