EU data protection authority confirms privacy threat in "Telecoms Package"