[pembrook]

>Risk assessments on GDPR litigation are blown wildly out of proportion.

Are there any precedents set for GDPR enforcement yet? No? Then how can you know that?

[detaro]

Little in GDPR is completely new, lots of it has been in national law or previous EU legislation before, and the entities responsible for enforcement aren't new, so you can look at past privacy enforcement actions as at least some precedent.