This could be a slippery slope if this was a new law or a new application of the law, but it is neither of these: this is just the existing application of existing EU laws that exist for, what, 30 years or more? There are very precise and well-understood laws in many countries of Europe stating that yes indeed, it is absolutely forbidden for a company to retain information about EU Citizen that can be processed automatically without these citizens having their say about it. Having that information as part of an index, meta-data or whatever doesn't really matter. You have that kind of information, you must abide by the law. The companies storing personal information are very aware of these laws and have processes in place to cater for the "having their say about it" part. And believe me or not all the newspaper are fully compliant with the law, for many, many decades. And no, this part of Europe (that is, not UK) is not well-known for its strong censorship stance. So there is no problems. At all. What you are depicting here is for some kind of arrogant US company that believes it knows better than the people of Europe how to deal with their own laws. Surprisingly enough, that will not end up well for them.