In France, the CNIL did already enforce constrains on data management. The GDPR could be seen has an enhancement of current constrains/laws.