It's worth noting that's Data Protection Act (2018), there was also Data Protection Act (1998) which predates GDPR and had many of the same laws. People outside of the UK only started caring when a regulator with enough teeth (and penalties harsh enough) took notice, but data protection has been a requirement in the UK long before GDPR and should hopefully continue long after it.