The UK has made all appearances of going forward with GDPR principles independently of the EU, and as with almost everything in terms of EU regulations, we will

The UK has made all appearances of going forward with GDPR principles independently of the EU, and as with almost everything in terms of EU regulations, we will likely have to comply with GDPR whether we stay inside or outside of the EU formal structures especially given its extra-territorial enforcement. The UK already has a lot of data protection legislation (more so than the US), and is making no indication of wishing to repeal. GDPR will be a pain for a lot of businesses, but seems to be well designed to protect citizens by to reducing abuses of surveillance by private companies like those in the news right now with Facebook. GDPR is the appropriate response to decades of giving industry an opportunity to self regulate its data collection practices (the "cookie law" was a warning shot ignored by industry), which has evidently spectacularly failed should you open any broadsheet newspaper this morning.