[varispeed]

UK organisations are quite impotent. As in a lot of talk and very little walk. Unfortunately.

[james_in_the_uk]

ICO has brought fines. Perhaps more significantly, privacy activists are starting to bring cases in courts.

Data rights enforcement is nascent/emerging but certainly a space to watch.