The provisions of national data protection acts become meaningless when data crosses national borders.