EU Regulations and Decisions directly affect member states. Whereas EU Directives require member states to enact new laws.

As the GDPR is a regulation, it directly applied to member states.

When the UK left the EU they made a paralled law

> The GDPR has been incorporated into UK data protection law as the UK GDPR see: https://ico.org.uk/for-organisations/dp-at-the-end-of-the-tr...