Revisiting EC draft data protection regulation