New EU privacy rule changes how data is gathered