Within 12 months, companies that do business in the European Union will be required to comply with a new set of data privacy rules called the General Data Protection Regulation (GDPR)