EU Law Lets in Hackers