4 ms·

>Companies learned to ignore the GDPR. While the industry had initially thrown a tantrum about the GDPR and its high fines, the past years have shown that this

>Companies learned to ignore the GDPR. While the industry had initially thrown a tantrum about the GDPR and its high fines, the past years have shown that this deterring effect has quickly washed off. The reality shows that the legislator was unable to simply legislate an enforcement culture. The GDPR has often become a mere paper tiger. I'm not a huge GDPR fan, for a multitude of reasons, but the reality of the compliance situation is the biggest one. I wonder if this experience will inform the EU in its further legislative adventures. Most likely perhaps by causing even sterner legislation, or perhaps (if I dare to dream) by limiting the bureaucratic-federalist ambitions.

jruohonen 3y ago
It already has informed quite a lot. For instance, the DSA's enforcement was designed precisely with the GPDR's enforcement problems in mind. But it indeed points toward the federalist direction you fear. While mileages vary, centralization seems to be the only option for real enforcement as otherwise things end up in the lingo of infighting, lack of harmonization, and national bias. The other option is a US-style regulation-through-litigation, but I am not sure whether that is any better (neither for companies nor for consumers).