The first year of GDPR saw the carrot; next comes the stick

It has been one year since GDPR came into force and the world didn't end. So what really changed for advertisers and what's next?