The legislation that defines data protection and privacy in the UK and EU. Following the UK’s exit from the EU, much of the UK GDPR remains identical to the EU GDPR.