Mary J. Hildebrand comments in Law360 on the risks created by an expanded definition of personal data under the General Data Protection Regulation (GDPR).