The GDPR has not produced the privacy utopia its advocates promised: compliance consent banners are universally clicked through without reading; large tech companies have more resources to navigate compliance than smaller competitors; and data brokers continue to operate through legal gray zones. What GDPR has done is raise compliance costs for small businesses and entrench incumbents who can afford legal teams. A US equivalent would produce the same result.
