Effective on May 25, 2018, the General Data Protection Regulation (GDPR) of the European Union stands to change how many companies worldwide do business involving European Union citizens. For the first time, the concept of what constitutes personal information has been expanded by GDPR.