This requires the definition of standardized data pro tection and security standards in accordance with the EU data protection directive regarding the processing of personal data in all corporate companies, particularly those “in third countries” (i.e. mainly those outside the EU).