As Germany wins the race to become the first country to pass GDPR legislation, what does this say about their approach to protecting local businesses in the light of the increase in damaging data breaches?