The EU’s General Data Protection Regulation has been extended to three additional countries — Iceland, Liechtenstein and Norway, which are part of the European Economic Area (EEA). We tell you why it’s critical for multinationals not to overlook this regulatory change.