GDPR 2026: eight years old, still implemented wrongly

Eight years after the GDPR took effect, the gaps in many projects are the same: outdated RoPAs, partial DPAs, US sub-processors without SCCs, deletion concepts without technical enforcement. What's really mandatory in 2026 and how to enforce it technically.