A GDPR law broadens the scope of what the Data Protection Act covers to account for online identification markers, location data, and genetic information, among others