They are probably thinking about brexit and the UK data protection act - but this shouldn’t need any action since UK GDPR has an amendment which recognises EU data protection standards as adequate for the UK.