2019 was a coming of age year for data privacy in the European Union. With the GDPR firmly established, we saw shifting consumer expectations, shifting regulatory scrutiny and shifting terms of business. This is precisely why, as things move faster and further, the efficient, quick-to-adapt nature of self-regulation is so essential as we move forward.