>This is the problem with GDPR. Each member state decides what's clear and what's not. That was a big problem with the Data Protection Directive (which the GDP

>This is the problem with GDPR. Each member state decides what's clear and what's not. That was a big problem with the Data Protection Directive (which the GDPR replaced). But now the European Data Protection Board[0] (basically, the supervisory authorities from the member states and EEA member states, plus the European Data Protection Supervisor) can make sure that each supervisory authority is - approximately - following the same standards. Each case gets filed in a common system by the lead authority investigating it and cases gets discussed between the Board members. [0] https://edpb.europa.eu/ https://edpb.europa.eu/