WTO-compliant Protection of Fundamental Rights: Lessons from the EU 'Privacy Directive'