Over the almost five years since it was enacted, the General Data Protection Regulation (GDPR) has drastically changed the privacy landscape. But for some, the GDPR still does not go far enough, despite the number—and size—of fines levied in recent years.

During a Wednesday morning keynote at the IAPP 2023 Global Privacy Summit, former and current EU regulators, and privacy advocate Max Schrems, looked at the evolution of the GDPR, from its improvements to its lingering shortcomings, and discussed how the law will need to further evolve, especially in regard to cross-border data flows.

Enforcement Shortcomings