The European Union’s tough new data rules are “bearing fruit,” but some member states have still not put the General Data Protection Regulation (GDPR) into law, and only 20 percent of EU citizens seem aware of which public authority is responsible for protecting their personal information.

This week, the European Commission published an assessment of how the GDPR has been implemented across the European Union. The report concludes most member states have set up the necessary legal framework, and the new system strengthening the enforcement of the data protection rules is falling into place. It found businesses are developing a compliance culture while citizens are becoming more aware of their rights. At the same time, convergence toward high data-protection standards is progressing at international level. 

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...