Data is a currency. Before May 2018, users — who provide or create this data in the first place — were secondary to this economy. The Data Protection Act gave the public recourse, but very little transparency, and there was little understanding of the value of the data they were giving away daily. GDPR has put power in the hands of the users, and many companies have yet to understand that they need to explain exactly what their users are getting, at what costs, and why they should trust them, before they hand over their valuable data.