The European Union’s tough new data rules are “bearing fruit,” but some member states have still not put the General Data Protection Regulation (GDPR) into law, and only 20 percent of EU citizens seem aware of which public authority is responsible for protecting their personal information.



