The GDPR and data protection in Europe: two years later

Two years after the introduction of the GDPR, this report gives an overview of the impact of the General Data Protection Regulation in Europe.
This report presents the main challenges regarding the enforcement of the regulation. On the one hand, despite their limited capacity, data protection authorities faced an increasing workload and investigated big corporations, in some cases issuing high sanctions. On the other hand, companies abided by the GDPR and set new procedures. Also, enterprises required the expertise of the Data Protection Officer, whose role has changed significantly.
According to the reported insights, most consent management platforms displayed on online sites are not fully compliant with the GDPR, leaving users somewhat skeptical about the use of their personal data. The final chapter illustrates the main concerns of individuals when it comes to personal data privacy and why companies should invest in transparent data handling.