The GDPR (General Data Protection Regulation) is coming into effect later this month – on the 25th of May - and all manner of businesses are trying to work out what it means for them.