"GDPR brings a more 21st century approach – the right of consumers to data portability is new, as is mandatory data breach reporting, higher standards of consent, and significantly larger fines for when companies get things wrong. But the big change is about giving consumers control over their data. I believe this is a positive development."