New data privacy law impacts global businesses