The European Union’s tough new data rules are “bearing fruit,” but some member states have still not put the General Data Protection Regulation (GDPR) into law, and only 20 percent of EU citizens seem aware of which public authority is responsible for protecting their personal information.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...