[azernik]

Decisions like this by the Council are legally binding on member states. Similar to how GDPR is technically implemented by each state's relevant government agency.