Compliance with data-privacy rules is vexing enough for companies in the United States, with a myriad of rules and jurisdictions, imprecise definitions, and nightmarish bad publicity when things go awry. The novice might guess that compliance in the European Union is even more difficult, with Europe’s added layers of bureaucracy and different cultural norms.