European Ministers of Justice and Home Affairs issued a joint statement on March 24 vowing to push for changes in the way intelligence on terrorist suspects is collected from private companies and shared among member nations. If carried out, these promises could have significant effects on companies in the travel industry, on financial institutions, and on Internet and communications companies. Similar statements were made last year in the wake of the Paris attacks, so actual progress is hardly guaranteed. But the post-Snowden privacy hangover that had stymied action for years now seems to be dissipating, and some changes are inevitable. The question is exactly what these changes will entail.