According to the USA's Secretary of Homeland Security, the answer would appear to be "none", as reported by legal academic Michael Geist in the Guardian. This answer may be unsurprising coming from such a source, and from a place that doesn't have data protection laws of the kind implemented in Europe. However, the creeping into common use of various kinds of surveillance technologies is as applicable in the UK as in the USA, and so the "reality check" given by the Homeland Security Secretary is of relevance.
Geist was reporting from the International Data Protection and Privacy Commissioner's conference, this year held in Canada. A major part of the conference appears to have been the consideration of the various measures that might be taken to ensure that personal data and privacy are protected adequately. These measures include Privacy Impact Assessments, a concept that I mentioned as part of a summary of the UK Information Commissioner's Office 2006 report on the surveillance society (nice link there!) Of these measures, Geist says:
While the effectiveness of these measures has improved in recent years, there remained a pervasive sense that these responses are inadequate.
So are data protection and privacy law dead? I personally don't think so, and evidence would seem to suggest that having a good reputation in this area is good business sense. In other words, the consumer cares and businesses have a lot to gain from following sound data protection policies. Looking at the bigger picture, the ICO's 2006 report suggests that society as a whole suffers from an uncontrolled surveillance society.
The challenges for data protection & privacy enforcement authorities are mounting. The need for joined-up thinking from these authorities is increasing too.