It has been more than three years since the EU General Data Protection Regulation (GDPR) took effect, and while there was a slow start…