Policy Forum 

# Five Years of EU’s General Data Protection Regulation: Impact and Lessons Learned 

##### Watch the Event 

Download:

[ 

Video 

](https://fastly-unsigned-us-east-1-prod.brightcovecdn.com/media/v1/pmp4/static/clear/6039378657001/1719ca6f-bfc6-4cbd-9ba4-405b49b5c931/0feeffdc-2170-431e-b4d0-e212371fd2b6/main.mp4) 

[ 

Audio 

](https://assets.pippa.io/shows/5e2e15a046f4465f31c89d8c/1685037904713-25ff9b3f15c3f724b50b5d45f81eeff2.mp3) 

Join the conversation on X using [\#CatoTechnology](https://x.com/hashtag/CatoTechnology). Follow [@CatoInstitute](https://x.com/catoinstitute) on X to get future event updates, live streams, and videos from the Cato Institute.

Date and Time 

May 25, 2023 12 - 1 PM EDT 

Location 

Cato Institute, 1000 Massachusetts Ave, NW, Washington, DC 

Share This Event 

##### Featuring 

![Nathan Lindfors](/sites/cato.org/files/styles/author_picture/public/2023-05/nathan-lindfors-Cropped.jpg?itok=3DOa5Ibw) 

Nathan Lindfors 

Policy Director, Engine

[ 

](https://twitter.com/nathanlindfors) 

![Lee Matheson](/sites/cato.org/files/styles/author_picture/public/2023-05/lee-matheson-Cropped.png?itok=YfSQm1yo) 

Lee Matheson 

Senior Counsel, Future of Privacy Forum

[ 

](https://twitter.com/privaclee) 

![Brandon Pugh](/sites/cato.org/files/styles/author_picture/public/2023-05/brandon-pugh.jpg?itok=MFtR9ZIx) 

Brandon Pugh 

Policy Director and Senior Resident Fellow, R Street Institute

[ 

](https://twitter.com/Brandon_J_Pugh) 

[![Jennifer-Huddleston-img-cropped2.jpg](/sites/cato.org/files/styles/author_picture/public/2023-06/Jennifer-Huddleston-img-cropped2.jpg?itok=nA04B0o7)](/people/jennifer-huddleston) 

[Jennifer Huddleston](/people/jennifer-huddleston)

Senior Fellow, Cato Institute

[ 

](https://x.com/jrhuddles) 

In May 2018, the European Union’s General Data Protection Regulation (GDPR) became effective. The immediate impact was seen in the millions of dollars and man hours spent on compliance; the loss of certain websites or services from the European Union, such as the *Los Angeles Times*; and changes to user experiences and privacy choices. Advocates of the GDPR have argued that the tradeoffs are worth it for improved cybersecurity and the increased privacy rights of EU citizens, but critics have pointed to the potential impact on other values, such as speech and innovation, and have questioned if the GDPR has actually led to improvements or just increased red tape.

Five years on, the impact of the GDPR on Americans and American companies as well as their European counterparts continues to be felt. As the United States debates its own potential federal data privacy law and sees an emerging patchwork of state laws, what lessons can we learn from the GDPR about benefits and consequences of data privacy regulation?

**Lunch to follow**

[![Creative Commons License](/build/cato_2020/images/creative-commons.svg)](http://creativecommons.org/licenses/by-nc-sa/4.0/) 
This work is licensed under a [Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License](https://creativecommons.org/licenses/by-nc-sa/4.0/).