This document discusses the regulation of emerging technologies using the multiple streams framework. It introduces a technology stream to the framework to better account for the influence of technological change on policymaking. The document applies this modified framework to analyze the adoption of the EU's General Data Protection Regulation (GDPR), which regulated personal data despite significant opposition. It finds that policy entrepreneurs were able to couple the problem, policy, politics, and technology streams by framing data privacy and legislative harmonization as problems and the GDPR as the solution, leading to its eventual adoption.