When GDPR was finally put into motion earlier last year, and the reems of emails associated with it from online retailers finally stopped, many hoped that for EU citizens a new era of improved personal data security was around the corner. The regulation was very much a watershed moment in the overall debate that has been dominated by increased worries around data misuse and breaches in recent years.