In the year since it went into effect, the European Union’s General Data Protection Regulation (GDPR) has heightened awareness of data privacy issues and driven some important changes in how US companies handle consumer data. However, most organizations appear to be a long way off from implementing GDPR’s core requirement for a privacy-by-design model for…