> How many breaches of privacy by large orgnaizations occur in the EU? When they occur, what happens?

Malicious non-compliance is still common IME. Enforcement is happening but has been focused on the very large egregious abuse so far only.