GDPR is now live and effective, and Austrian lawyer and privacy advocate Max Schrems has already brought suit, claiming the policies of Google and Facebook do not meet the new standard set up in the regulation. His three total lawsuits against the companies total a reported โ‚ฌ7.6 billion (U.S. $8.8 billion).

His legal filings highlight an interesting aspect of GDPR: its private right of action. The ultimate effectiveness of the law will probably turn on the enforcement by member states in the European Union and the United Kingdom, under its GDPR-like law. 

Thomas Fox has practiced law for over 40 years. Tom writes the daily award-winning blog, the FCPA Compliance and Ethics blog and founded the Compliance Podcast Network. Tom leads the discussion on AI in...