An evaluation report on GDPR, released just over two years after the regulation's entry into application, finds that GDPR has met most of its objectives, but that more cooperation is needed in the application of the rules across the bloc.

At the time of the report, all member states except Slovenia, adopted new legislation or adapted their national data protection law. "Slovenia has been requested to provide clarifications to the Commission on the finalisation of that process," the report says.

The Commission finds that citizens are more empowered and aware of their rights and that the GDPR enhances transparency and gives individuals enforceable rights, such as the right of access, rectification, erasure, the right to object and the right to data portability.

A survey from the EU Fundamental Rights Agency that was released last week shows that 69% of the population above the age of 16 in the EU have heard about the GDPR and 71% of people heard about their national data protection authority.