True, though I have to admit that Neelie Kroes seems to have plenty of both executive authority and the willingness to exercise it in a muscular fashion. It helps that the EU privacy protections are closer to the constitutional than the legislative level.
