The GDPR has been in effect for 2 years now and theoretically applies to any company on the planet which deals with personal data belonging to EU residents. But practically speaking, enforcing this law should be quite difficult, as EU authorities have zero direct enforcement power over foreign corporations without EU assets.

Over the past two years, have EU authorities succeeded in enforcing GDPR-related judgements over a single foreign business? By "enforce," I'm referring to a scenario where the foreign entity refuses to comply willingly, so EU authorities convinced a foreign court to enforce the judgement on their behalf.

The GDPR has been in effect for 2 years now and theoretically applies to any company on the planet which deals with personal data belonging to EU residents. But practically speaking, enforcing this law should be quite difficult, as EU authorities have zero direct enforcement power over foreign corporations without EU assets.

Here's a scenario that would satisfy the requirements of this question:

1. A website was operating outside the EU, with no EU legal entity established and no payments accepted from EU users
2. An EU court ruled that they must still comply with GDPR because they happen to have visitors living in the EU
3. Said website ignored the EU court ruling entirely, refusing to comply
4. The EU managed to convince the authorities of the country where the website is located to enforce the judgement on their behalf

I'm interested in any country outside of the EU, EEA or the UK where this happened.

The GDPR has been in effect for 2 years now and theoretically applies to any company on the planet which deals with personal data belonging to EU residents. But practically speaking enforcing this law should be quite difficult, as EU authorities have zero direct enforcement power over foreign corporations without EU assets.

Over the past two years, have EU authorities succeeded in enforcing GDPR-related judgements over a single foreign business? By "enforce" I'm referring to a scenario where the foreign entity refuses to comply willingly, so EU authorities convinced a foreign court to enforce the judgement on their behalf.

The GDPR has been in effect for 2 years now and theoretically applies to any company on the planet which deals with personal data belonging to EU residents. But practically speaking, enforcing this law should be quite difficult, as EU authorities have zero direct enforcement power over foreign corporations without EU assets.

Over the past two years, have EU authorities succeeded in enforcing GDPR-related judgements over a single foreign business? By "enforce," I'm referring to a scenario where the foreign entity refuses to comply willingly, so EU authorities convinced a foreign court to enforce the judgement on their behalf.