Companies large and small are updating their privacy policies and service terms to comply with upcoming European Union rules governing data and privacy. Only EU users are technically covered by the rules, formally known as the General Data Protection Regulation.