Until May 2018, companies must implement new rules on the processing and free movement of data [Regulation (EU) 2016/679].