Ten years ago, the GDPR gave Europeans real control over their personal data for the first time. From the right to access your data to the right to be forgotten, its protections apply wherever you are in the EU.