EU General Data Protection Regulation: Changes and implications for personal data collecting companies