Since the UK left the EU, the ICO has defined GDPR in its guidelines. Until December 2020, the previous GDPR guidelines will apply to companies and organisations. It remains to be seen what will happen to data protection after this transitional period.