The GDPR is a regulation (hence the R at the end) not a directive. It became UK law as soon as it was passed by the EU, and it didn't need to be implemented in

The GDPR is a regulation (hence the R at the end) not a directive. It became UK law as soon as it was passed by the EU, and it didn't need to be implemented in to UK law. The UK has already passed their amendments to the GDPR,[0] which will effectively fork it into the "UK GDPR". These will come in to force on the 1st of January. There's a "Keeling Schedule" available[1], which is effectively a diff between the EU GDPR and the UK GDPR. [0] https://www.legislation.gov.uk/uksi/2019/419/introduction/made https://www.legislation.gov.uk/uksi/2019/419/introduction/ma... [1] https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/779335/Keeling_Schedule_for_GDPR.pdf https://assets.publishing.service.gov.uk/government/uploads/...