The GDPR is enforced by data protection authorities (DPAs) in each EU member state.