Following the GDPR, on EU level the European Data Protection Board has been/will be established.
Each EU country will have a national supervisory office .
A supervisory office will have the power to enforce through assessments of the Data controllers.
Data controllers have a duty towards Data subjects.
Data controllers need to enforce security at Data processors.
Data controllers require third countries to provide Guarentees.
Data controllers need to inform Data subjects when a Third party asks to disclose privacy data.
Data subjets may exercise their privacy rights with a Data controller.
