This requires the definition of standardized data protection and security standards in accordance with the EU data protection directive regarding the processing of personal data in all corporate companies, particularly those in “third countries” (i.e. mainly those outside the EU).