The Dutch data protection officer (CBP) gets more powers to fine the police in cases of privacy infringes. See below (in Dutch).
Why not give them more powers also to investigate and if necessary fine all these online sales companies that ask for and store privacy sensitive data which one has to fill in and to my opinion they may just not need or at least do not have to store for long. And what do they do with all this data? Have you ever wondered where all this direct marketing and spam is coming from?
Wout de Natris