Ministers agreed on the rules that govern international data transfers and on the territorial scope of the data protection regulation. In short, EU data protection laws will apply to non-European companies if they do business in the EU. The existing laws weren’t clear on this point.