The short answer is yes. For the longer answer I would go back to the statistics in Europe: search engines and organizations have generally done an okay job, based simply on the fact that the vast majority of complaints to the data protection authority have led to a rejection. Ultimately, yes, it would come to the commissioner—and really, ultimately, to the court—to decide these issues.