A comparison of data protection legislation and policies across the EU