[zepin]

GDPR is not a directive, but a "regulation" (hence the name, General Data Protection Regulation). It is enforceable "as is" in the whole EU without the need to be transposed into the various national laws.