We’ve all seen the news reports about companies collecting and sharing customers’ personal information without their knowledge or consent, not keeping sensitive information private, and not adequately protecting their systems from hackers. Now the European Union has done something about it, by enacting the GDPR (General Data Protection Regulation) in May 2018. But