Authorities who work at EU level may be unable to fully enforce a new data protection regulation after May because of lagging member state legislation. The General Data Protection Regulation, a massive overhaul of EU law with far-reaching implications for the handling of personal data, will go into full force beginning in May. But just last month, the European Commission said 26 member states have yet to pass all the laws needed to ensure that EU-level data protection authorities are able to properly enforce the law.
