A law passed last month by Austria's right-wing government could undermine the enforcement of new EU data protection rules set to enter into force at the end of May. The new Austrian law demands the country's data protection chief to first issue warnings before sanctioning violating firms. German news site Heise.de, which first reported the last minute amendments, this could mean that most infringements will go unpunished. The new EU rules, called the General Data Protection Regulation (GDPR), will be enforced from 25 May and aim to hand back the control of personal data to citizens.