New data security laws are coming – are you ready?