The EU’s General Data Protection Regulation was a landmark piece of legislation stipulating how businesses approach consumers’ privacy with regards to data. Using EU and US data, this column explores how the legislation impacted technology venture investment. The implementation of GDPR had an immediate, pronounced, and negative effect on investment. However, these results do not necessarily constitute a welfare loss, and the long-term effects of GDPR remain to be seen.