New EU-US data transfer framework should not change your privacy strategy; Connecticut senate passing new data privacy legislation; French Regulator CNIL gets added power to investigate SMBs