Member states can legislate to regulate the processing of personal data when they are empowered to do so in terms of the EU’s General Data Protection Regulation (GDPR). However, when doing so, they must ensure that they are fully compliant with the said regulation or otherwise the national law must be disregarded, the Court of...