General Data Protection Regulation (GDPR) enforcement is increasing, and the law is changing, Latham & Watkins partner Gail Crawford said during a recent panel. She, along with her partners Myria Saarinen and Tim Wybitul, and Porsche chief privacy officer Christian Volkel, discussed the enforcement landscape; recent cases and fine proceedings; and how to prepare to defend GDPR fines and civil actions. This article distills their insights and analyzes – with input from Ropes & Gray partner Rohan Massey – a recent case in the European Court of Justice that has potentially altered the GDPR’s “one-stop-shop” mechanism. See “How Do You Put a System of Controls in Place When Your Target Keeps Moving?” (Jul. 22, 2021).