Is it only in Europe that this is already by law for every entity that stores personal data?