Companies working in the EU - or any association or club - must now get express consent to collect personal information, or face hefty fines.


The measure is an effort by EU lawmakers to limit tech companies' powers.


Misusing or carelessly handling personal information will bring fines of up to 20 million euros or four percent of a company's global turnover.