In reply to Bob.

Bob,

Who cares about you? The EU certainly doesn't.

All you are really saying is that GDPR won't be followed 100% by 100% of those to whom it applies. Newsflash: that's true of every law. The GDPR is no different, and the EU doesn't expect it to be.

And who said anything about big companies lying down if found in violation? The EU has dealt with Microsoft and Google (among others) before. It knows what to expect and how to win such cases if necessary.

Perhaps you should check out the results of past EU litigation against such companies before predicting the EU will lose. Just ask Microsoft and Google how that has worked out in the past.

More importantly, however, the fact that the EU has won such cases before -- and obtained huge monetary judgments -- means that big companies know very well that the EU has a track record of following through on such things. They know that non-compliance with the GDPR will be expensive in terms of time, money, and other resources. So, for some time, they have been taking steps both to comply and to make sure that others from whom they obtain services also comply.

So the EU will get its way. In fact, the only real question here is not whether the GDPR will survive, but whether other nations or groups of nations follow suit and, if they do, whether they will go even further.