As GDPR is of course a Regulation, it will mean that it will be directly applicable across the EU, without the need for any domestic legislation or indeed real scrutiny. There is also lots of work for each state to do ie what a ‘special category or sensitive personal data can be processed is left to each member state to define.
https://services.parliament.uk/bills/2017-19/dataprotection/documents.html
Â
Â