In a first, EU Court fines EU for breaching own data protection law