Eu approved a new directive which basicly said every company who process personal data from people will be obligated to notify the person and they can not use the info for others intereste, only if the person give his accord.
If you got a website which process personal data the terms and conditions are not longer enough.
Basically no more commercials based on your search history. You can find the article on the internet in 25 may will be implemented.
PS: the amends are up to 20milions euro
And if are a company from an other country and have European users you have to implement the directive too, I think only from the people of EU.