We show that the European Union's General Data Protection Regulation (GDPR) reduced data sharing online, but had the unintended consequence of increasing market concentration among technology vendors that provide support services to websites. We collect panel data on the web technology vendors...