This article is about the French Data Protection Act, not GDPR. They might be lex specialis, I don't know. I am just giving a benefit of the doubt that it is a more difficult problem than people make it out to be.
From my understanding GDPR and all other EU wide ideas or "Laws" are issued as Directives, each country then has to implement the directives in their own countries laws.
some/ most implement directives in cut and paste manner some don't.
> GDPR and all other EU wide ideas or "Laws" are issued as Directives,
No. The fact that the last letter in "GDPR" is not "D" is a pretty good hint that it's not a Directive ;)
It's a Regulation. Regulations apply directly, and are not translated into local law.
But omgitsabird is correct that GDPR is not the relevant basis here, but a clause in French Data Protection Law. And this clause exists because of the ePrivacy Directive.
