In Germany offenses against the GDPR can cause a "Abmahnung" which do not result in a fine but a charge. There a legions of filthy lawyers waiting for the 25.5.
"Abmahnungen" are cease and desist letters by the way.
"Why is some extra law specific to Germany relevant to my comment? This is a discussion about the GDPR, not about national data protection laws."