The new General Data Protection Regulation (GDPR) is changing the way companies can collect data in the Europe Union, and by extension in the United States.