To date, relatively few EU nations have actually created their own laws. Some lawmakers, business executives, and others have called the revisions confusing and challenging to effectively implement. The European Commission, however, is likely to bring legal action against nations that fail to comply. Many say U.S. companies will also have to comply, at least in part, with the revisions when working with their EU customers.
The EU is also considering major changes to its broader Privacy Directive. Goals include enhancing legal harmonization and strengthening enforcement of data collection and cross-border transfer rules both within the EU and with non-EU nations.