This is the EU digital strategy for legislation: vague but reasonable, so that you have to comply with the spirit of the law not the letter of it.

They haven't nailed it every time, but on the whole it's a good approach. It's hard on companies, but rightly so.