text: On enforcement, the paper calls for a single “European body” outfitted with “proper tools” — including “broad investigation, audit and monitoring powers, and the ability to audit algorithms” — to be entrusted with enforcing the new regulations.
  That would mark a step-change from the EU’s data protection framework (GDPR), where responsibility for enforcement is decentralized to a patchwork of under-resourced local/national data protection agencies. Critics maintain the pace of GDPR enforcement in complex, cross-border cases against big tech is too slow to be effective. A two-year review of the regulation by the Commission this summer also found a general lack of uniformly vigorous enforcement.