An EU Parliament committee voted to stop exempting US data processing companies from EU data protection laws.

This is one step in a long process, but it is a good one.