As the GDPR marks its 10th anniversary, it is entering a new phase of regulatory change that demands renewed attention from privacy teams. Proposed amendments, including through the Digital Omnibus, evolving guidance and heightened enforcement are reshaping how organizations must approach compliance. This article examines 10 important developments concerning the GDPR, distilling insights shared by Cooley attorneys during a firm presentation. See “What the E.U. Data Act Means for IoT Businesses Operating in Europe” (Apr. 15, 2026).