The directive: A barrier to transborder dataflows?