Two years ago on May 25, 2018 the EU enacted the groundbreaking General Data Protection Regulation. They recently published a two year review of the law to understand its impact.

Some highlights:

1. Rules across member states and cooperation between them is still a work in process which has limited the law’s effectiveness to date.
2. Data protection authorities have seen increased budgets but are still likely underfunded.
3. EU citizens are increasingly aware of #GDPR. However it’s unclear if they are exercising their rights under the law.