The effectiveness of the sentence: "In relation to national law, the GDPR applies as a matter of priority to all automated processing of personal data as of May 25th, 2018 [...]" is understood by experts. The Düsseldorfer Kreis – the conference of the independent federal and state data protection authorities on April 26th, 2018 – thereby confirms a regulatory framework – and once again surprises an entire industry. Just as, for example, the financial industry has underestimated the determination of the regulation for a long time, the media industry seems to underestimate the inherent connections between technological opportunities, changing regulatory conditions and the associated changes in decision-relevant parameters until now.
Users leave behind extensive traces when using apps and internet-based services. In contrast to the analog world, these generally remain available in the form of data and are analyzed and used by various service providers for a range of purposes.