Experts say the devil is in the details when it comes to complying with the swath of new privacy and cybersecurity laws enforced by the European Union’s General Data Protection Regulation.

WHOIS, the searchable “phonebook” of contact data for internet domains, may violate GDPR — or it may not. A lawsuit seeks to find out which it is.