The GDPR came into effect in May 2018, what has happened since then? Decisions, challenges (Schrems I and II), regulation (current proposal for EU regulation on AI), discussions (e.g., about end-to-end encryption) - how does it all hang together?