Five years on from its introduction into law, there is evidence that the General Data Protection Regulation (GDPR) has caused a shift in boardroom attitudes to data protection compliance – meeting a core objective of the legislators and regulators that drove reform.
https://www.pinsentmasons.com/en-gb/out-law/analysis/business-strategies-gdpr-technological-change