Could the US afopt EU style data protection laws following recent data breaches?