You are wrong again, Directives are ratified, Regulations apply verbatim. That said, the GDPR left some detail to each member state.

I am sorry buboard, I don't know whether you are affilated with FB, but that's not just how it works. They indeed, just claim it. That's why you pay for General Counsel.