[belorn]

I can think of two noticeable effects.

1: It makes leaks a liable issue and one that get additionally costly if the company tries to hide it.

2: All data collection by the big players are sitting behind a single legal argument that informed contained can be gain by a pop up window or by passively clicking a link, both which the GDPR writers said was not informed consent. That big players explicit ignore part of the regulation and get away with it is a problem that not enough people are questioning. The discussion has moved away from the law makers and into the enforcement.