The European Union’s new law, the General Data Protection Regulation