What is GDPR? A new EU law that changes how companies use our personal information kicks in on 25 May. Source