New European Union rules requiring businesses to bolster their cyber defenses are already off to a messy start.