When the General Data Protection Regulation comes into play in May 2018, it will have a sweeping effect on how personal data is handled online. Though it's an EU law, it...