It's worth noting that the Data Protection Directive will be replaced by the General Data Protection Regulation[0] soon, probably in 2018.[1] This Regulation (

It's worth noting that the Data Protection Directive will be replaced by the General Data Protection Regulation[0] soon, probably in 2018.[1] This Regulation (which will apply automatically across the EU, unlike the previous Directive which had to be manually ported ('transposed') into national law by the member states) will toughen up the rules on consent, data portability, liability and enforcement. One of the biggest headlines is that companies can be fined up to 4% of their _global_ turnover for breaches of the GDPR. [0] https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://en.wikipedia.org/wiki/General_Data_Protection_Regula... [1] http://www.scmagazineuk.com/european-parliament-informally-agrees-gdpr-to-come-into-power-by-2018/article/463353/ http://www.scmagazineuk.com/european-parliament-informally-a...