The thing about enforcing the law is that it's still just politics. You can't suddenly start fining everyone without expecting a backlash. A law only works well when most people are respecting it, not when most people are breaking it.
Why will there be a backlash? Unlike some other laws where the general public typically contains both winners and losers, when it comes to the GDPR I can't see why the general public would be against it - the law doesn't restrict anything per-se, it just requires data processing to be made transparent to the user and allow them to decline.
Because most of the people who actually understand GDPR are the people who have to implement it, business owners. Threre a lot of business and website owners, which might make them the majority of general public in this case. Plus, as a politician you rarely want to upset an entire category od voters, especially a wealthy one.
