With the scorn of those who are trying to milk money from prospect clients by threatening the “4% of the world turnover” fine, GDPR is not going to enter full force on May 25, 2018.
Sections 85 to 90 of the GDPR settle an option for the national members to pass specific local legislations on a wide range of topics, from free-speech to employment, from scientific research to personal identification numbers.
These are critical pieces of the GDPR-related legislations’ puzzle and full compliance can’t be accomplished if . on May 25 – the whole legal framework will still be incomplete.
In Italy, for instance, the draft bill that empowers the Government to pass the amendments to the Data Protection Act and to the rest of the Data-Protection-related legislations is still quietly sleeping between Montecitorio and Palazzo Madama. And since we’re entering into election time, nobody will actually care to move ahead about Data Protection at least until the end of 2018.
The consequence is that relevant part of the GDPR can be enforcend only if a State decided whether or not to pass these specific laws, but if a State doesn’t tell whether these laws will be passed or not, GDPR will hardly be fully enforced.
Enforcing the GDPR is becoming very alike a Catch 22.