Many people are complaining about some fines, but here are some others I see that are evidence of this working extremely well:

- A police officer was fined for using his department's tools to get someone's private phone number for his personal use

- A rental agency was fined for leaving renter's private data (ids, etc) open to the public for six months after being notified of the vulnerability

- A company was fined because they were continuously filming their employees at work without explanation

- A political candidate misusing private citizen data for campaign purposes.

- Rental car companies tracking drivers by GPS without notifying them

- Hospital staff having fake doctor profiles to view unrestricted patient data

This is convincing me that GDPR is a great success.