The European Union's new data protection rules, which take effect on May 25, will give people more control over the way their personal information is used online.