EU advances rules that wrestle control of user data away from Big Tech Including protections against unlawful data transfers.