The EU General Data Protection Regulation (GDPR) has over the years garnered plenty of discussions about practical implementation and impacts to businesses. This is not surprising considering how important and wide-reaching this Regulation is. What is surprising however, is that it is virtually impossible to say what the regulatory burden for businesses actually is. The enigma of the cost of the GDPR has existed from its inception, and has not been cleared up since.
This RegWatchEurope (RWE) essay, which was written by Henk Griffioen from the Dutch Advisory Board on Regulatory Burden, traces back the different stages of Better Regulation-related analysis that were done on this file, including on the Member State level. It draws out different dimensions on which the conversation about costs of EU legislation can be enhanced.
See here for the essay.