The EU’s GDPR ‘Fix’ Misses the Point Entirely
The European Union has just agreed to new procedural rules for enforcement of the General Data Protection Regulation (GDPR), touting faster investigation deadlines and streamlined cooperation between data-protection authorities. But celebrating 15-month investigation timelines as progress reveals just how far we’ve strayed from reasonable regulatory practice.
This “steroids shot” for GDPR enforcement, as Politico calls it, fundamentally misdiagnoses the patient. The problem isn’t that privacy authorities are too slow; it’s that they wield enormous power through a privacy-absolutist lens, with no obligation to balance data protection against innovation, economic security, or other fundamental rights.