"The ECJ ruled* Thursday that if a company operates a service in the native language of a country, and has representatives in that country, then it can be held accountable by the country’s national data protection agency despite not being headquartered in the country."
*http://curia.europa.eu/juris/document/document.jsf;jsessioni...
I think this is great news.