EU privacy law heralds new era in online data protection