One of the most sweeping reforms to European data protection laws is here in the form of the General Data Protection Regulation (GDPR), and the reach is global. This paper highlights what the new regulations mean and why a new approach is needed.