The first part of this white paper sets out thematically what we believe are the key areas of focus for the Commission as it deliberates the future of European data protection and privacy regulation, and makes a number of concrete recommendations. The second part responds specifically to the points raised by the Commission in its communication. Some key themes we cover include: