How GDPR will be policed in the EU?
Now GDPR has launched, the hard work really begins. But the genius behind GDPR isn’t just what it means for consumer rights, it’s about how the threat of massive fines means companies themselves will do most of the heavy lifting when it comes to policing and enforcing the broad set of rules.
It’s the large data controllers—the companies responsible for safeguarding the data—who will drive enforcement by requiring that their data processors become compliant and cutting them off if they don’t.
Source: GDPR overview: How it will be policed in the EU — Quartz