BRUSSELS—The European Union’s tough new data-protection law demands costly changes for many companies—and opens rich business opportunities for others.
A cottage industry around privacy technology has sprung up in recent years, with firms offering new products and services designed to help companies more efficiently meet the demands of the EU’s General Data Protection Regulation. In an unexpected twist, some of those compliance tools could create additional legal risk for the companies using them, experts say.
...