General Data Protection Regulation; EU comprehensive privacy law establishing individual rights and organizational obligations