When the European Union’s new data privacy law goes into effect on May 25, 2018, some United States-based nonprofits may be surprised to find themselves within its scope.  With the General Data Protection Regulation (GDPR), the…