ICO has brought fines. Perhaps more significantly, privacy activists are starting to bring cases in courts.

Data rights enforcement is nascent/emerging but certainly a space to watch.