What does this mean for the UK?

So far, the government have said they will adopt a UK version of the GDPR so there shouldn’t be much change.

However, if the UK want to continue to transfer data within the EU, it must have sufficient safeguards for the protection of personal data of EU citizens similar to the GDPR by requesting for an adequacy assessment, i.e. ask the EU to deem it’s safeguards for personal data as suitable (similar to the GDPR provisions).

Where things get interesting is that the GDPR does not touch on law enforcement because the EU doesn’t legislate on that. However the Investigatory Powers Act (this Act (then bill) has to some extent be deemed at odds with the rights of individuals.