Given the two-year lead time, few would have guessed that the best way some organisations would comply with the European Union’s stringent new data rules would be to simply cut access to services.

On 25 May, as the EU’s General Data Protection Regulation (GDPR) came into force, dozens of Websites shut down their activities completely, while others forced users to agree to new terms of service—some by flooding inboxes with e-mails asking people to remain on their mailing lists. Several companies outside of the European Union, however, took the nuclear option to ensure compliance: They blocked all European users from their servers—some temporarily, others permanently.

Neil Hodge is a freelance business journalist and photographer based in Nottingham, United Kingdom. He writes on insurance and risk management, corporate governance, internal audit, compliance, and legal...