That's simply not true. Each country (or state, in the case of Germany I believe) will have their own privacy commissioner with substantial leeway. Now techni

That's simply not true. Each country (or state, in the case of Germany I believe) will have their own privacy commissioner with substantial leeway. Now technically these differences won't be implemented as laws, but there will be substantial differences between eg the French and the UK privacy regulators. The GDPR also allows for individual states to strengthen its provisions, eg for genetic data.