I don't think the law has done much at all. I operate a business that serves as a data broker / processor under GDPR.
I have had a total of 66 data requests in 4 years. I handle data requests and follow the laws, but I also understand the EU/UK has zero grounds to enforce anything against my business if I were to flat out reject all requests.
They can't fine me, I don't have a physical or business presence in Europe, though I do have European customers.
The only reason I handle requests is to protect my customers, not myself.
I have had a total of 66 data requests in 4 years. I handle data requests and follow the laws, but I also understand the EU/UK has zero grounds to enforce anything against my business if I were to flat out reject all requests.
They can't fine me, I don't have a physical or business presence in Europe, though I do have European customers.
The only reason I handle requests is to protect my customers, not myself.