"the Data Protection Rules build on a framework of intentional vagueness and executive dominance. Many compliance obligations are either self-determined by companies handling personal data or left to government discretion." @apar1984