The General Data Protection Regulation (GDPR), and the associated Data Protection Act 2018, creates the most rigorous new privacy regime in over twenty years. It affects those that offer goods and services to individuals in the EU, or that collect and analyse data related to EU residents, regardless of their location.
This complex regulation impacts almost every business to some extent.
Brexit will not affect the requirement for UK organisations to meet the GDPR standards. The Data Protection Act will remain in place and the EU Withdrawal Act will incorporate GDPR into UK Law maintaining the overall data protection standards for the UK.