It has been three years since the European Union’s General Data Protection Regulation (GDPR) came into force, one of the most debated and analysed piece of EU legislation. Throughout this period, and especially after its implementation, starting with 25 May 2018, mechanisms have been explored and still are being explored aimed at ensuring that a reasonable balance is struck between the need to respect the rights of European citizens, cal...