Ten years later, has the GDPR fulfilled its purpose?

The GDPR (General Data Protection Regulation, an EU law that gives people more control over their personal data) turned 10 years old in 2024, and experts say it has succeeded culturally by making privacy a daily business concern rather than just legal paperwork, but it hasn't fully achieved its goal of giving people easy, real control over their data. The regulation still has gaps in areas like consent rules, the definition of personal data, and international data transfers that create confusion and uncertainty in how companies apply it.