With the European Union’s new data protection law going into effect imminently, it's driving a flurry of changes from businesses based inside and outside the EU, racing to comply and avoid new levels of financial penalties.

Jarno Vanto, a cybersecurity lawyer and partner at the law firm Polsinelli, gives us insight on what The General Data Protection Regulation entails, who it applies to, and the implications of not complying. Here is what you need to know before May 25, 2018.