The European Commission proposes an overhaul of data protection laws, including large fines for firms that breach the rules.