The General Data Protection Regulation is seen as great news for the privacy and security of consumer data but what does it mean for many companies?