The fifth anniversary of the European Union’s General Data Protection Regulation (GDPR) coming into force has highlighted the many successes of the legislation—such as companies’ willingness to comply—but also exposed areas where the law is still untested and unclear.
