The GDPR becomes law in May of 2018. Here’s what US-based companies need to know about hiring a Data protection officer.