Twitter and WhatsApp could face EU data privacy sanctions