Presuming the UK actually exits. They can still withdraw A50 -- or possibly extend it but the EU has cast doubt on this. Even if it does exit -- EU will have i

Presuming the UK actually exits. They can still withdraw A50 -- or possibly extend it but the EU has cast doubt on this. Even if it does exit -- EU will have incredible influence over the UK and can effectively enforce GDPR on most companies over a certain size as those companies will have to create entities and corporate structers in the EU for varying reasons -- mostly tax minimisation for exporting. Little sole traders with no amibition of expanding outside the UK will probably have the benefit of not having it enforceable on them. Again this presumes the UK chooses not to implement it's own data protection laws.