Hacker News Reader

Every country has a slightly different implementation of the directive, so I don't think the EU will have a single example to give.

However, GDPR is a regulation, not a directive. I haven't seen that countries pass their own implementation of it.

Each country-specific privacy org gets leeway around rules like legitimate interest.