One year after the General Data Protection Regulation took effect, the sweeping EU privacy law is still clouded in uncertainty. A 50 million-euro fine against Google, imposed by France, has opened up a dispute about jurisdiction as well as the vexed question of how, exactly, companies can legally get people’s consent to process their data. As national regulators look to step up their enforcement in the GDPR’s second year, MLex is releasing a Special Report to shine a light into the regulation’s murky corners. In this podcast, three of the contributors — Matthew Newman, Jack Schickler and Cynthia Kroet — discuss their findings with editor Sam Wilkin.