I think the EU are still being very lenient with companies right now to give them time to adjust their practices. I'm looking forward to when they (hopefully) start to hand out fines.
It's an EU law but enforcement is up to the individual countries. Which is why Ireland keeps its own regulator on a tight leash - to keep the big US players there.