As someone that worked in an EEA tech company when the GDPR was actually being implemented, it absolutely did a ton for improving how much focus there was on pr

As someone that worked in an EEA tech company when the GDPR was actually being implemented, it absolutely did a ton for improving how much focus there was on privacy and PII security. That has seemed to be true for the places I've worked since too, from what I've heard. Most companies still have no good process for data deletion or export, and I am fairly convinced it would be even more dire if people hadn't started preparing for the GDPR years ahead.