GDPR at Seven: The Enforcement Record Is Worse Than You Think
Seven years of GDPR enforcement has produced billions in fines and almost no behavioral change from the largest offenders.
Sam Chen brings an unusual combination of technical depth and journalistic rigour to technology analysis. After spending eight years as a software engineer at two ASX-listed companies, building and maintaining enterprise data platforms and cloud infrastructure, Sam made a deliberate move into technology journalism to write the critical analysis that was missing from the press. Sam's engineering background means that when AI vendors make technical claims, Sam can evaluate them against first principles rather than press releases. Areas of particular focus include AI tool evaluation, security vulnerability analysis, privacy technology and the gap between what enterprise software promises and what it delivers.
Seven years of GDPR enforcement has produced billions in fines and almost no behavioral change from the largest offenders.
We ran network capture analysis on seven leading password managers. Three sent data to third-party analytics services without clear disclosure.
We retained a digital forensics firm to conduct technical analysis of five platforms. What the tools found did not match the words.
Every age verification scheme proposed or enacted so far has a critical flaw. We explain the technical reality policymakers keep ignoring.
We documented exactly how 20 major platforms respond, or fail to respond, to every current browser privacy signal.
We mapped the threshold conditions against the acquisition history of the five largest tech companies operating in Australia.
Sources are protected. Right of reply is standard for all investigations. We respond to every serious pitch.