[isostatic]

The GDPR was implemented in UK law by the Data Protection Act 2018

https://www.legislation.gov.uk/ukpga/2018/12/contents

Which is still in force