Yup, GDPR is pretty much harmonizing data protection laws across the EU. Much of the stuff that's in GDPR had already existed on a national level for quite a wh

Yup, GDPR is pretty much harmonizing data protection laws across the EU. Much of the stuff that's in GDPR had already existed on a national level for quite a while in some EU countries, like France and Germany, but got mostly ignored by multi-nationals. That's why the EU made these laws a big EU thing, so they are in a better position to actually enforce this stuff on multi-nationals.