There is a continuous tendency in European data protection law and regulation to increase protection standards and impose more limitations on how firms can use customer data. Data protection imposes costs on economic activity, and these costs should be recognized in data protection law and policy.