Since the introduction of the General Data Protection Regulation (GDPR) in 2018 and privacy laws in the U.S. like the California Consumer Privacy Act (CCPA), media agencies have spent the past four years building privacy departments, requiring them to make significant financial investments.