(11) In order to ensure effective protection of personal data in the Union, the rights of data subjects and the obligations of data processors and decision-makers should be strengthened and clarified, as well as equivalent powers to monitor and enforce data protection legislation and equivalent penalties for infringements in the Member States.