>Well, not really. These are directives, not laws. The GDPR is not a Directive, it is a Regulation (the clue is in the name...). Regulations are law, they hav

>Well, not really. These are directives, not laws. The GDPR is not a Directive, it is a Regulation (the clue is in the name...). Regulations are law, they have what is known as "direct effect"[0] and apply as-is throughout the EU without having to be written in to domestic law in each member state. (Directives can also have direct effect in certain circumstances too,[1] although they usually can't confer rights that people can use against non-State entities.) [0] https://en.wikipedia.org/wiki/Direct_effect_of_European_Union_law https://en.wikipedia.org/wiki/Direct_effect_of_European_Unio... [1] https://en.wikipedia.org/wiki/Direct_effect_of_European_Union_law#Directives https://en.wikipedia.org/wiki/Direct_effect_of_European_Unio...