Without any real court cases showing how GDPR will be actually enforced, this 'introductory period' was useless. It could last 4 years instead of 2, and it would not make any difference.

There should have been a phase of mock suits. "Here's what you're doing that's against the new rules, and you have two years to knock it off or lawyer up."