That is what just happened in the EU parlament: http://www.europarl.europa.eu/news/en/news-room/20160407IPR21776/Data-protection-reform-Parliament-approves-new-

That is what just happened in the EU parlament: http://www.europarl.europa.eu/news/en/news-room/20160407IPR21776/Data-protection-reform-Parliament-approves-new-rules-fit-for-the-digital-era http://www.europarl.europa.eu/news/en/news-room/20160407IPR2... > The new rules include provisions on: A right to be forgotten, "clear and affirmative consent" to the processing of private data by the person concerned, a right to transfer your data to another service provider, the right to know when your data has been hacked, ensuring that privacy policies are explained in clear and understandable language, and stronger enforcement and fines up to 4% of firms' total worldwide annual turnover, as a deterrent to breaking the rules. We'll see how that turns out.