What are the general requirements and major impacts of the gdpr, and how does this law differ from data protection legislation in the united states?.