00:00

Question 57·Hard·Cross-Text Connections

Text 1
The European Union’s General Data Protection Regulation (GDPR) rightly prioritizes individual privacy, yet in doing so it imposes a labyrinth of compliance duties on every firm that collects personal data. Multinational corporations can absorb the cost of hiring dedicated compliance teams, but small enterprises rarely possess such resources. The predictable result is a chilling effect on start-ups, which frequently forgo innovative projects rather than risk ruinous fines. By granting regulators sweeping enforcement powers, the GDPR ultimately jeopardizes the very competition that fuels technological progress.

Text 2
Although celebrated as a landmark privacy statute, the GDPR has not curbed the most troubling practices of dominant technology companies. These firms routinely steer users toward permission screens designed to elicit broad consent, thereby preserving their lucrative data-mining operations. Because the regulation relies on user consent rather than outright prohibitions, it allows the largest data collectors to entrench their power under a veneer of compliance. Until legislators close these loopholes, the GDPR will remain an impressive document with modest real-world impact.

Which choice best describes a difference in how the authors of Text 1 and Text 2 evaluate the GDPR?