I will not dispute that we need more enforcement, but it definitely exists and helps. For example, Google recently changed their "cookies" dialogue from "More options" to "Reject all".
They’ve basically been allowed to willingly and maliciously breach the regulation for 4 years.
Facebook appears to still be getting away with breaching the regulation on so many levels.