[emiliobumachar]

In the heated GDPR debates in Hacker News over the past few weeks, it was argued again and again that no lawsuits would happen because that's the US way, In Europe it's different, and the law is phrased in such way as that people can only complain to the regulator, who will serve as a free sanity filter. Only if the regulator decides there's a violation, then lawsuits can occur.

Is that plain wrong, or am I missing something?

[craftyguy]

Is not the fact that folks have brought lawsuits against these companies proof that you're wrong?