Companies violating the European Union’s new data protection laws would face fines of up to €100 million, according to the provisions of a sweeping reform package approved by European Parliament this week.

The stiffer corporate penalties are part of the data protection overhaul, which members of parliament said was desperately needed to bring the law up to date with technology. The EU’s current data policy was formed 19 years ago.