They're essentially the same, the ICO just doesn't enforce it.

The UK has a separate data protection law (UK GDPR[1]) which is the more or less same as the EU. The current government held a consultation on possible changes[2], but I would doubt they could actually carry through on making a significant change given their current weak and divided state and the likelihood they will lose in the next general election.

[1] https://uk.practicallaw.thomsonreuters.com/w-026-8528?contex...

[2] https://www.gov.uk/government/consultations/data-a-new-direc...

> The UK is working on a separate data protection law and the attitude towards privacy is very different from the EU (hence the rewrite)

This is very speculative. My guess is that changes will be made, but they'll be incremental and some effort will be made to ensure broad alignment with eu GDPR so we don't have another SCC-syle mess (where some major EU to USA data transfers were determined to be illegal.)

"is working" - well, this means that at least now the gdpr in uk isn't much different from eu. In the future? maybe, but for now it's the same