The General Data Protection Regulation requires companies to be accountable for how they use, manage and maintain the personal data of their customers and employees.