EU eyes big fines for privacy breaches