But that's not true. The GDPR is enforceable as law in each member country.
Really? I guess we're both wrong.
Yup. The GDPR is literally a regulation, not a directive. A directive is implemented into national law while a regulation is enforced as is and supersedes national legislation.