Polish gov websites - for example www.gov.pl itself - try to run Google Analytics / Tag Manager on visitors' devices. I've opened a case with local GDPR body "UODO" (part of said government) but they wouldn't do anything. Case dismissed.

GDPR is only as good as local government's interpretation and approach.