The Foundations of EU Data Protection Law