While the GDPR has undoubtedly enhanced data protection rights, it’s not immune to criticism. In this session, we delve into nuanced critiques from both industry insiders and privacy advocates. Are small businesses unfairly burdened? Does the one-stop-shop model hinder enforcement? Could GDPR’s data transfer rules fragment the internet? Join us for a balanced exploration of these issues and gain fresh insights into the ongoing evolution of data protection regulations.