The European Commission on Wednesday formally outlined its new data protection rules and touched on Google's own decisions. As hinted earlier, the rules would require plain, explicit permission for data, require data portability between services, and enforce a "right to be forgotten" for those who want to purge their data entirely. If a company saw a breach of information, they had 24 hours in most circumstances to notify both the regulators of affected countries and the European citizens they affected.