The General Data Protection Regulation (GDPR) is a new set of rules that gives EU citizens back control over their personal data and to simplify the regulatory environment for business.