Tougher EU data protection rules are planned for adoption late this year or early next. Yet as things stand an overwhelming majority of cloud providers would foul of one or another of the new measures. The General Data Protection Regulation, likely to be enforced from 2016 or 2017, replaces the 1995 directive and could introduce fines of up to €100m ($134m), along with rules on notifying breaches, data location and the right to be forgotten.