If anything I think @oldhippydude is overly optimistic about the effects of article 20 of the TPD. That is why I have chosen to get so actively involved in the politics side of vaping. I think there are countries in the EU that will choose to implement the letter of the law whilst leaving large loopholes open that defeat the spirit of it, but the idea that the UK would be one of these frankly belongs in cloudcuckoo land. When has the UK ever paid lip service to this type of EU regulation?
Errr...
The Data Protection Act would be a good place to start.