Ever since the General Data Protection Regulation (GDPR) came into force over two years ago, it is fair to say some companies (and media outlets, for that matter) have focused more on the potential fine capabilities regulators have at their disposal than actual compliance with the legislation.
