The rapid pace of technological advancement and particularly the advent of the internet have introduced diverging perspectives on the design and legislation of data protection in the EU. This section delves into the policy aspects of the General Data Protection Regulation (GDPR) process within the EU, examining the second stream in the reconstruction. The analysis of public consultation files acquired from the European Commission constitutes the main source feeding this stream, with additional empirical data drawn from expert interviews.