Many countries of the world have an objective of driving forward citizen-centric public services and where the citizen has some ownership and control of their own data.

In the UK this drive has struggled against legacy systems, a lack of innovation, poor delivery of major initiatives (eg Connecting For Health), and in a lack of risk taking. While GDPR is meant to increase citizen control and owership of their data, there is also a risk of major fines for data loss.

Do you think that GDPR will actually slow down a drive to citizen-focused systems within public services? If so how can we overcome the risk-adverse nature of the public sector and low innovation/transformation rates?