European Commission says personal data of citizens needs to be protected