GDPR is now a year old, yet there have been few large fines and third-party data continues to be used. But email marketers should not be overconfident — they will still have to cope with the e-Privacy and the California Consumer Privacy Act. Here is an analysis by Jack Carvel, general counsel at Qubit.