It seems even the massive corporations were not on it, as Google has been fined 50 million euros (£44m) for GDPR breaches.
The French data regulator CNIL has ruled that Google had a lack of transparency, inadequate information and lack of valid consent regarding ads personalisation.
It also stated that it believed that people were not sufficiently informed about how Google collected data to personalise advertising.
This decision has stemmed from two complaints against Google made in May 2018, made by privacy rights groups noyb and La Quadrature du Net (LQDN).
While Google EU has its base in Ireland, the French Data Protection regulator was chosen as the Irish counterpart had limited power.
This decision highlights how hard the GDPR can bite when it is breached, something that has worried a number of businesses since its implementation.
In response to the decision, Google have said they are “deeply committed to meeting those expectations and the consent requirements of the GDPR."
See this as a warning, make sure you are complaint or brace yourself for the hefty financial consequences.