A reform of the EU’s data protection rules, which date back to pre-internet times, is on the way, write Viviane Reding and Alan Shatter