Protection regulations sufficient for data protection

How and to what degree does the new data protection regulations sufficient for data protection; the AI in the financial sector in EU?