The European Union is moving toward new data protection laws that will require many U.S. companies with a sizable European customer base to comply for the first time, which could carry a hefty price tag. "There is no doubt that, as written, this proposal will have major repercussions for business in terms of compliance costs," says Belinda Doshi, a partner at London-based law firm Nabarro.