As I understand it, the existing Directive has to be implemented by member states in domestic law. This makes it difficult for one member state to enforce actio

As I understand it, the existing Directive has to be implemented by member states in domestic law. This makes it difficult for one member state to enforce action against a company incorporated in another. As a Regulation, the GDPR is directly binding and can be enforced at the EU level, rather than just at the national level. In some ways, it makes it easier to comply, because you just have one set of rules rather than multiple national implementations of the Directive.