This chapter was first published in the PLC Cross-border Data Protection Handbook 2008/09 and is reproduced with the permission of the publisher, Practical Law Company.