I wish I had more time and / or money because this is commonly ignored, and I would love to take all organisations who don't abide by this to court just for the hell of it. Many times it's under the guise of "legitimate interest" under a separate unselected tab and I would love to test that in court.
I feel like the EU should have made it so that you could actually sue corporations for GDRP violations (as long as you have enough evidence for a court to hear the case) and for the accuser to get part of the fine if you win. Would have been a much more effective enforcement strategy.
Weil, good for GDPR. Meantime, is there anything I can do to report sites that don't follow the letter of it?