[GJim]

If your asking if the GDPR is effective, yes, it is.

The only ones ignoring it completely are either dodgy companies, or the clueless. The companies exercising malicious compliance are now (quite rightly) increasingly seen as dodgy and need to up their game if they want to become respectable.

The days of not protecting user data are over.

[crazygringo]

GP asked for evidence.

[freehorse]

You can ask companies for a copy of all your personal data they hold. There is no way this would be possible without GDPR and similar laws. In general, data controllers need to abide to some legal framework and not do anything they want.

I am not sure what OP asks. They should make their request more specific, what they want evidence for.

[GJim]

The evidence is all around you.

For example, my insurance company can no longer get away with selling my details to financing companies behind my back. Such shenanigans are no more in the UK and EU thanks to the GDPR.