SO FAR, the biggest perceived effect of the most important data-privacy law ever has been a sharp increase in emails from social networks and web services alerting me that those endless contractual walls of text you thoughtlessly click OKAY on—privacy policies, data policies, and/or terms of service—will change, most of them conspicuously on the same date, May 25, 2018. Almost none of them mention what, exactly, has led to this mass update: the European Union’s General Data Protection Regulation, or GDPR.
GDPR becomes law, as keen deductive minds might gather, on May 25, two years after it was adopted by the European Parliament and just a few months after Facebook’s Cambridge Analytica scandal turned data privacy into a top issue for every ambitious politician and excitable journalist in the U.S.…