Parliament needs to approve any meaningful EU legislation anyway. The Commission cannot legislate. The problem isn't that the EU is undemocratic, it's that our elected lawmakers all seem to want to trample our privacy for one reason or another (see: the UK)