Following the first year of life under the EU’s General Data Protection Regulation (GDPR), and with only months to go until the California Consumer Privacy Act (CCPA) goes into effect, 2019 feels more like Waiting for Godot than Hallelujah Chorus. Unless policy makers around the world make a real effort to identify the actual privacy risks people face, we will see more of the same in 2020 – an incessant barrage of tedious cookie notices, overwrought haranguing against tailored advertising and more blaming of victims of cybercrime for governments’ failure to protect their economies from electronic attack by sophisticated state actors and criminals.
