The world-leading data law changed how companies work. But four years on, theres a lag on cleaning up Big Tech.