When talking about the EU, there are two types of laws (well, three if you include treaties), Directives and Regulations.
Directives are common goals which much be transposed into law by each country and there is indeed differences in implementation. An example of a directive is Directive 2012/27/EU on energy efficiency. It set goals on energy efficiency (and minimum targets), but each country implemented it's own legislation to transpose the Directive into law, and those implementations varied wildly.
However, EU Regulations are a different kettle of fish. Regulations are EU legal acts which are immediately enforceable as national law in all EU states. GDPR is a Regulation and so applies uniformly across the bloc.
Regulations are designed to harmonise legislation across the entire bloc. Obviously there are differences in enforcement, but the ultimate arbiter is the CJEU and decisions are binding in all EU states.
When talking about the EU, there are two types of laws (well, three if you include treaties), Directives and Regulations.
Directives are common goals which much be transposed into law by each country and there is indeed differences in implementation. An example of a directive is Directive 2012/27/EU on energy efficiency. It set goals on energy efficiency (and minimum targets), but each country implemented it's own legislation to transpose the Directive into law, and those implementations varied wildly.
However, EU Regulations are a different kettle of fish. Regulations are EU legal acts which are immediately enforceable as national law in all EU states. GDPR is a Regulation and so applies uniformly across the bloc.
Regulations are designed to harmonise legislation across the entire bloc. Obviously there are differences in enforcement, but the ultimate arbiter is the CJEU and decisions are binding in all EU states.