Actual punitive measures taken against entities who e.g. manipulate personal data in a negligent way. [1]
Which was much harder to achieve before.
[1] https://www.enforcementtracker.com/