The EU's new data privacy law, the General Data Protection Regulation (GDPR), is now in force. This new law affects any organization that holds and uses data on people inside the European Union, regardless of where it is based. While…