Er, I like GDPR, and it was EU-wide, but each member still would have to write its own framework into its legal system to implement GDPR as it saw fit. Those frameworks are all different in their detail.

E.g. Germany has the BDSG, and the UK has (had?) the DPA.