This seems clear* enough:
“GDPR FAQs
In light of a uncertain 'Brexit' - I represent a data controller in the UK and want to know if I should still continue with GDPR planning and preparation?
If you process data about individuals in the context of selling goods or services to citizens in other EU countries then you will need to comply with the GDPR, irrespective as to whether or not the UK retains the GDPR post-Brexit. If your activities are limited to the UK, then the position (after the initial exit period) is much less clear.
The UK Government has indicated it will implement an equivalent or alternative legal mechanisms. Our expectation is that any such legislation will largely follow the GDPR, given the support previously provided to the GDPR by the ICO and UK Government as an effective privacy standard, together with the fact that the GDPR provides a clear baseline against which UK business can seek continued access to the EU digital market. (Ref:
http://www.lexology.com/library/detail. ... ea289726a0)”
Comes into effect next week doesn’t it?
*the underlined bit may not be too clear given that the Prime Minister and the Brexit Minister currently disagree on several aspect of Brexit policy. Comes into effect next year doesn’t it?