Heralded as a groundbreaking legal framework for data privacy, has the GDPR in its current form become a barrier to innovation, impeding AI development and hampering essential research? How can privacy be balanced with progress so that we can leverage data for innovation and societal benefit?