The European Union's General Data Protection Regulation (GDPR) comes into effect May, 2018. Every firm, irrespective of its physical location, interacting with EU citizens, will need to make changes to oversight, systems and processes to comply with the new rules