It depends, enforcementtracker.com shows that the authorities have been willing to chase after a rather diverse mix of violators.

But indeed, leaving GDPR enforcement to government authorities was a huge mistake. Anyone should be able to sue over GDPR violations impacting them.