he is missing the lowest hanging fruit
F**book and G00G still have 13 years cut-n-paste from COPPA in their T&Cs.
That is invalid in Europe. A minor cannot consent to their data being processed without written parental consent of at least one parent, usually both parents/guardians until they have reached the age of full legal responsibility - between 16 and 18 depending on which country.
He should add that one too. Just for laughs if not for any other reasons. If he does not have a suitable offspring to file the complaint, I am sure the el-reg readership can give their kids some interesting ideas who to talk to on this one.