The GDPR is discussed primarily as a legal framework. The enforcement picture looks different. Resource constraints, institutional variation, and informal prioritization shape outcomes in ways the regulation does not describe.
EU data protection authorities operate under significant and well-documented resource constraints. Complaint volumes have grown substantially since 2018; budgets and staffing have not kept pace. The practical result is informal prioritization that shapes how cases develop across the system.
noyb has documented that over 85% of its filed cases remain undecided, more than half waiting longer than eighteen months. Complainants frequently wait three months or more for an initial response that does little more than confirm receipt. These are not individual delays — they reflect the structural condition of the system.
Cases that attract enforcement attention tend to share recognisable characteristics: high public visibility, media or NGO involvement, or a factual record that is administratively straightforward to act on.
When a company addresses the specific practice at issue in a complaint, authorities will in many cases close the matter without a financial penalty. This follows from the logic of complaint-based enforcement: the basis for action is an ongoing violation, and remediation removes that basis. It is a common pattern in the published record, worth understanding accurately.
The complaint-based model processes individual cases. It does not address patterns systemically. When the same issue affects many people, each typically files separately. Authorities do not generally aggregate individual complaints into systemic actions unless there is a specific external trigger: NGO involvement, a formal inquiry, or political attention.
Meta’s handling of deletion requests at the Hamburg authority is a documented example. Each complainant filed separately, and the authority addressed cases on that basis. The pattern was visible; the response remained individual. This reflects how the system is structured.