In MBA thinking ,which might have influenced the cause of actions around the beta, certainly questions around accountability for this disaster and decisions would come up?

now we know they have certain headers for billing purposes, not the smartest way... Is there a danger in these headers now? going to the 'trusted partner' with your own fake headers without going through the O2 proxies?

to be precise: The important part is a regulation, hence it does not need to be transposed into national law! It is mandatory for the member states to comply. It is down to the European Parliament to adopt it, which of course has representatives from every member state.

I have been studying this stuff for a while and I must say there is something good on the way Some hints, likes , +1: - it must now be passed through the European Parliament might take long (2 years) but Reding is know for pushing things through, after that we have the 2 years of transition period! - The legislation is very technology neutral, which is good, because it keeps the perspective on the consumer and not on technology. Hence capturing all aspects of cookies, webbugs, flashshit, browser fingerprints etc. - opt/in will be the standard, (and is the only way it makes sense to me) - more precise and transparent privacy notices, not something like "we share information only within our group" .... (btw. we are a giant with 5000 companies) - It might be that the data portability changes the game. If they really adopt formats for export/exchange (which hardly worked in enterpise integration) this can move you from service A to B in theory, weaker lock-ins, more focus on consumer service. lets hope!!