EU GDPR and UK GDPR The EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) became directly applicable and fully enforceable in all EU Member States from 25 May 2018. It introduced substantial amendments to EU data protection law and, in the UK, it replaced the Data Protection Act 1998 (DPA 1998) and Directive 95/46/EC (the Data Protection Directive). On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continued to be subject to EU law. The EU GDPR regime was applicable under UK law until the end of the implementation period (11 pm UK time on 31 December 2020) and remains applicable in the EEA. The UK General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) regime is applicable under UK law from the end of the implementation period (as the Retained Regulation (EU) 2016/679, UK GDPR from the end of the implementation period and as the Assimilated Regulation (EU) 2016/679, UK GDPR from 1 January 2024). Assimilated law is the name given to retained EU law