In terms of technology, the next wave will probably need to use blockchain if, post-GDPR, such systems are to overcome the need to collect the same data each time someone travels.