Some companies want to see how new European Union data privacy laws are enforced before spending a lot of money on compliance.

The EU's General Data Protection Regulation is set to go into effect May 25, and recent surveys have shown varying levels of preparedness for companies in Europe and out.

"No one yet knows what kind of behavior would trigger a big fine," Philip Yannella, Co-Practice Leader of Ballard Spahr's privacy and data security group, told Bloomberg Law. "A lot of companies are waiting to see how this all shakes out" and are standing by to see what kinds of companies and activities the EU regulators focus on with early enforcement actions, he said.

Read the full article here. Subscription may be required.