The European Commission's new, stronger, data protection regulation applies in full from 25 May 2018, with hefty penalties for non-compliance.