There are a number of misconceptions about the EU’s General Data Protection Regulation (GDPR), which comes into effect on May 25.