Let us not forget personal responsibility
"The Commission promises to strengthen data protection law..." Perhaps it would be good to educate people so they understand how to keep their data Private. For example, most people do not know that email is not private at all. While there are some alternatives (like TrulyMail.com, and others) not much attention is given to them.
If people do not understand how they contribute to their own private data being 'out there' then how can they be part of the solution?