http://www.huntonprivacyblog.com/2011/09/articles/european-union-1/german-state-dpa-fines-payment-transaction-provider-for-unlawful-transfer-of-transaction-data/index.html