"Define specified and explicit purposes;" What does this even mean? For every piece of data they have to detail where and how it is used? I don't think any major company could do this reliably.

"Inform users with regard to the purposes of the processing implemented;" Seems like an extension of the first.

"Define retention periods for the personal data processed;" Forever, but valid.

"Not proceed, without legal basis, with the potentially unlimited combination of users’ data;" What? Are they saying that the use of data can never change?

"Fairly collect and process passive users’ data ;" A good one.

"Inform users and then obtain their consent in particular before storing cookies in their terminal." Their cookie law is freaking ridiculous so they should probably get their head out of there ass to begin with.

Most of this seems like FUD - are there any companies that have these policies in place currently?