Europe’s pioneering data protection legislation turned seven years old in May, but the compliance and enforcement difficulties that have dogged the rules since they came into force look set to present both companies and data regulators with fresh headaches for some time to come. 

The EU-wide regulator of the General Data Protection Regulation (GDPR) has issued its latest annual report detailing some of the enforcement trends from 2024. And two of the European Data Protection Board’s (EDPB) key concerns still center on organizations’ level of GDPR compliance, and how national data protection authorities (DPAs) should foster better co-operation to achieve a more harmonised enforcement culture.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...