The EU General Data Protection Regulation (GDPR) is the most important change in data privacy regulation in 20 years