Why do the EU and the US find it so difficult to find common ground when it comes to the protection of personal data? Does Canada offer a plausible balance?