I’ve noticed that the data protection authorities are deadbeats for the most part. None of my reports have ever lead to any action in the slightest – not even a warning to the offender. Sometimes reports are rejected for frivilous reasons.

So knowing that the GDPR is merely symbolic in my experience, I have quit trusting the marketplace. Quit paying for things electronically, quit buying things online, quit sending email, quit sharing my email address with others, cut way back on electronic transactions, reach orgs the old fashioned way (by paper letter), etc.

Anyone else practicing data minimisation like this? It seems like the world around me is entirely unaware that the GDPR is mostly unenforced. Sure, they enforce a few token cases against Google and the like just for appearances. But the GDPR is failing to protect actual people whose rights are undermined.