The General Data Protection Regulation (“GDPR”), a new European Union (EU) data protection law, takes effect on May 25, 2018. The GDPR gives individuals in the EU more control over how their data is used and places certain obligations on businesses that process personal information of those individuals.