Audits Don't Solve Security Problems GDPR is a step forward because it doesn't focus on an audit as the end goal.