The EU's new general data protection regulation is regarded as the world's toughest regulation on data privacy. Companies are now required to explain to users the way they collect data.