Not a scientist nor native English speaker myself, so I’m wondering: shouldn’t that technically say „hypothesis + evidence“ instead of „theory + evidence“? Which is of course nitpicky (if I’m even correct) in the context of a tumblr post, but I’m still curious

The GDPR is a regulation (that’s what the R stands for), not a directive. Directives must be transposed into national law by the member states, while regulations apply directly