Helen Dixon, head of Ireland's Data Protection Commission, in May submitted a draft decision to more than two dozen of the bloc's privacy regulators for review, as required under the law. Eleven regulators objected to the proposed ruling, sparking a lengthy dispute-resolution mechanism, she said. The contents of the draft decision haven't been disclosed. Twitter's European operations are based in Dublin. "It's a long process," Ms. Dixon said at The Wall Street Journal's virtual CIO Network conference.

California's passage of their "GDPR-lite" caught people off guard. We think this is part of a trend we've studied for a long time. Much of the current analysis misses key points, so it seems worth explaining. About two years ago, we asked several thought leaders in the U.S. about the odds we'd see legislation like the E.U. GDPR provides clear rights to E.U citizens, controlling data captured on-line.