> The Union dictates rules the countries must follow the laws are still written by national parliaments.

You're thinking of EU Directives, which have to be transposed into national law by some deadline. EU Regulations (e.g. GDPR) are considered legally enforceable all on their own, though still have a delay.