Safe Harbour was shot down after the Schrems case.

Google and Facebook are being taken to task currently.

The huge fines for GDPR violations will come if the companies cited as in breach of the regulations fail to do what the EU asks.

The EU is doing a lot. Just because it can't act with immediacy it doesn't mean nothing is happening.