The EU's General Data Protection Regulation (GDPR) goes into effect in just a few short weeks - May 25, 2018. GDPR applies to any business that collects any personal information data about individuals. Personally identifiable data includes things from which identity can be derived, such as, for example, an IP address.