Ehh one of the major complaints about EU legislation is it's left intentionally vague and relies on the companies to guess what the goal is, which of course misses something, take their yearly fines and tweak their system after each round of fines.