EDIT: I didn't realize the anger this would bring out of people. It was supposed to be a funny meme based on recent real-life situations I've encountered, not an attack on the EU.
I appreciate the effort of the EU cookie laws. The practice of them just doesn't live up to the theory of the law. Shady companies are always going to find a way to be shady.
The what or what?
The EU supreme court or the EU data protection agency, roughly.
GDPR enforcement is left to the member states. The EDPB isn't an agency, its more like all the national data protection authorities in a trench coat.