The EU's Data Protection Directive was enacted in 1995, well before the advent of social networking sites, the ubiquitous tracking of web users and widespread use of geo-location devices, the huge growth of the "surveillance state," "cloud computing," and the explosion of cross-border transfers of electronic data.