[schoen]

I believe it's normally enforced by the privacy regulator of each individual EU member country, e.g. the BfDI in Germany.

https://en.wikipedia.org/wiki/National_data_protection_autho...