Data protection law is about to undergo the most fundamental change in 15 years.