Now What? A New Direction for U.S. Businesses and Law in the Wake of the General Data Protection Regulation, 29 S. CAL. INTERDISC. L.J. 129