Government in Action

Theory is useful. Watching government actually work (or fail to work) is better. Let's trace a real policy through the machinery of government.

Case Study: The EU's GDPR

The General Data Protection Regulation is one of the most consequential laws of the 21st century — affecting every company that touches European citizens' data. Here's how it happened.

The Problem (2010-2012) The EU's existing data protection rules dated from 1995 — before smartphones, social media, or cloud computing. Facebook had 1 billion users. Google tracked everything. Europeans' data was being harvested at industrial scale with minimal consent or transparency.

The Proposal (January 2012) The European Commission (the EU's executive) proposed a comprehensive regulation. Key players:

• Viviane Reding (EU Justice Commissioner) — championed the regulation
• Jan Philipp Albrecht (MEP, Greens) — led the European Parliament's position

The Lobbying War (2012-2015) Tech companies deployed unprecedented lobbying. Google, Facebook, Amazon, and others spent tens of millions. Over 4,000 amendments were proposed in the European Parliament — more than any previous EU law. Industry wanted weaker consent requirements and larger loopholes.

Adoption and Implementation (2016-2018)

The final text was adopted in April 2016. But it didn't take effect until May 25, 2018 — a two-year grace period for organizations to comply.

The result was global panic. Companies worldwide scrambled to:

• Audit their data practices
• Rewrite privacy policies
• Implement consent mechanisms (those cookie banners you see everywhere)
• Appoint Data Protection Officers
• Prepare for potential fines of up to 4% of global annual revenue

Impact

GDPR has been transformative:

• €4.5 billion in fines issued by 2024 (Meta alone: €1.2 billion)
• California, Brazil, India, and others modeled their own laws on GDPR
• Companies fundamentally changed how they handle personal data
• "Privacy by design" became an industry standard

The Lesson

GDPR shows how government actually works: a real problem → a political champion → intense lobbying → complex multi-institutional negotiation → a law that changes behavior worldwide. It took 6 years from proposal to enforcement. It wasn't perfect. But it demonstrated that democratic governments can still regulate powerful global corporations when the political will exists.

Every policy has a similar story. The details vary, but the pattern — problem, proposal, politics, compromise, implementation — is universal.