The regulation is so far, USA or EU, not very promising. A slap on the wrists and no transparent investigation or explanation how data is handled, will not convince me.