A year after the introduction of #GDPR, Employment and Data Protection Partner, Paul Gonzi discusses the lessons learnt during this past year, from the practical implementation of the regulations based on the principles involved, to those that emerge from initial court judgements. He also discusses the case of Doreen Camilleri vs the Information and Data Protection Commissioner regarding the continued use by a former employer of her email account.